CVE-2022-25869

What it actually does

Insecure page caching in Internet Explorer allows interpolation of <textarea> elements leading to cross-site scripting in affected Angular versions.

Why it matters to the business

Attackers may execute scripts in users' browsers via IE, risking data exposure or unauthorized actions in web applications; widespread use of affected packages increases organizational exposure despite low exploit probability.

How an attack unfolds

An attacker supplies input containing a crafted <textarea> tag that bypasses sanitization; when the page is cached insecurely in Internet Explorer the tag is later interpolated and executed as script in the victim's context.

How to fix it

Upgrade affected packages to the listed fixed versions: ruby-rack (Debian:11) to 2.1.4-3+deb11u1, ruby-rack (Debian:12) to 2.2.4-3, rack/rack (GIT) to d573159067d8dc64db97beff67621654754e86f2, or ruby-rack (Ubuntu:Pro:14.04:LTS) to 1.5.2-3+deb8u3ubuntu1~esm6; disable IE caching or restrict IE support where feasible.

How to confirm the fix worked

Verify installed package versions match the fixed releases above; test pages in Internet Explorer to confirm <textarea> interpolation no longer occurs; re-run dependency scans after updates.

Typical attack path

1. Identify a web application using the vulnerable package and serving content to Internet Explorer users
2. Craft and submit malicious input containing an interpolated <textarea> element
3. Trigger page caching behavior in IE
4. Induce a victim to load the affected page so the script executes

How to detect it

Inspect web-application logs and proxy records for requests containing unexpected textarea tags; review browser cache artifacts and rendered page sources on IE clients for signs of script injection.

What your security team should do

• Prioritize upgrades to the exact fixed versions provided within the next maintenance window given the public exploit availability
• Review and restrict Internet Explorer compatibility modes in affected applications
• Monitor EPSS trend and re-assess risk if scores rise further