Lucene search

K
osvGoogleOSV:USN-4543-1
HistorySep 25, 2020 - 5:03 p.m.

ruby-sanitize vulnerability

2020-09-2517:03:04
Google
osv.dev
5

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.0%

Michał Bentkowski discovered that Sanitize did not properly sanitize some
math or svg HTML under certain circumstances. A remote attacker could
potentially exploit this to conduct cross-site scripting (XSS) attacks.
(CVE-2020-4054)

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.0%