Lucene search
RedhatCVELIST:CVE-2015-7580HistoryFeb 16, 2016 - 2:00 a.m.
CVE-2015-7580
2016-02-1602:00:00
redhat
www.cve.org
Cross-site scripting (XSS) vulnerability in lib/rails/html/scrubbers.rb in the rails-html-sanitizer gem before 1.0.3 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary web script or HTML via a crafted CDATA node.
References
lists.opensuse.org/opensuse-security-announce/2016-02/msg00014.html
lists.opensuse.org/opensuse-security-announce/2016-02/msg00024.html
lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html
www.openwall.com/lists/oss-security/2016/01/25/15
www.securitytracker.com/id/1034816
github.com/rails/rails-html-sanitizer/commit/63903b0eaa6d2a4e1c91bc86008256c4c8335e78
groups.google.com/forum/message/raw?msg=rubyonrails-security/uh--W4TDwmI/m_CVZtdbFQAJ
Related
debiancve
debiancve
CVE-2015-7580
2016-02-16 02:59:03
osv
osv
rails-html-sanitizer Cross-site Scripting vulnerability
2017-10-24 18:33:36
prion
prion
Cross site scripting
2016-02-16 02:59:00
cve
cve
CVE-2015-7580
2016-02-16 02:59:03
github
github
rails-html-sanitizer Cross-site Scripting vulnerability
2017-10-24 18:33:36
hackerone
hackerone
Ruby on Rails: Potential XSS on sanitize/Rails::Html::WhiteListSanitizer
2015-08-08 09:37:38
ubuntucve
ubuntucve
CVE-2015-7580
2016-02-16 00:00:00
nvd
nvd
CVE-2015-7580
2016-02-16 02:59:03
rubygems
rubygems
Possible XSS vulnerability in rails-html-sanitizer
2016-01-24 21:00:00
nessus
nessus
openSUSE Security Update : rubygem-rails-html-sanitizer (openSUSE-2016-148)
2016-02-08 00:00:00
Fedora 22 : rubygem-rails-html-sanitizer-1.0.1-2.fc22 (2016-3a2606f993)
2016-03-04 00:00:00
Fedora 23 : rubygem-rails-html-sanitizer-1.0.3-1.fc23 (2016-59ce8b61dd)
2016-03-04 00:00:00
suse
suse
Security update for rubygem-rails-html-sanitizer (important)
2016-02-07 17:11:11
Security update for rubygem-rails-html-sanitizer (important)
2016-02-09 14:12:34
Security update for portus (important)
2016-04-25 20:07:56
openvas
openvas
Fedora Update for rubygem-rails-html-sanitizer FEDORA-2016-59
2016-02-29 00:00:00
openSUSE: Security Advisory for rubygem-rails-html-sanitizer (openSUSE-SU-2016:0356-1)
2016-02-08 00:00:00
Fedora Update for rubygem-rails-html-sanitizer FEDORA-2016-3
2016-02-29 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: rubygem-rails-html-sanitizer-1.0.3-1.fc23
2016-02-28 12:28:41
[SECURITY] Fedora 22 Update: rubygem-rails-html-sanitizer-1.0.1-2.fc22
2016-02-28 08:31:19