Lucene search

CVE-2023-23627 Sanitize vulnerable to Cross-site Scripting via Improper neutralization of `noscript` element

🗓️ 27 Jan 2023 23:17:44Reported by GitHub_MType

Sanitize 5.x to 6.0.0 Cross-site Scripting Vulnerabilit

Reporter	Title	Published	Views	Family All 16
Prion	Cross site scripting	28 Jan 202300:15	–	prion
OSV	CVE-2023-23627	28 Jan 202300:15	–	osv
OSV	Improper neutralization of `noscript` element content may allow XSS in Sanitize	28 Jan 202301:17	–	osv
OSV	ruby-sanitize vulnerabilities	24 Apr 202405:23	–	osv
Veracode	Cross-Site Scripting (XSS)	2 Feb 202308:15	–	veracode
CVE	CVE-2023-23627	28 Jan 202300:15	–	cve
UbuntuCve	CVE-2023-23627	28 Jan 202300:00	–	ubuntucve
Vulnrichment	CVE-2023-23627 Sanitize vulnerable to Cross-site Scripting via Improper neutralization of `noscript` element	27 Jan 202323:44	–	vulnrichment
Debian CVE	CVE-2023-23627	28 Jan 202300:15	–	debiancve
NVD	CVE-2023-23627	28 Jan 202300:15	–	nvd

[
  {
    "vendor": "rgrove",
    "product": "sanitize",
    "versions": [
      {
        "version": ">= 5.0.0, < 6.0.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/rgrove/sanitize/security/advisories/GHSA-fw3g-2h3j-qmm7

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Jan 2023 23:44Current

6.2Medium risk

Vulners AI Score6.2

CVSS36.1

EPSS0.00057

CWE-79