ROS-20240815-13

🗓️ 15 Aug 2024 00:00:00Reported by RedosType

A vulnerability in Rails Html Sanitizer with potential content injection, excessive backtracking, and cross-site scripting attack

Reporter	Title	Published	Views	Family All 109
AstraLinux	Astra Linux – Vulnerability in ruby-rails-html-sanitizer	14 Sep 202612:01	–	astralinux
AstraLinux	Astra Linux – Vulnerability in ruby-rails-html-sanitizer	14 Sep 202612:01	–	astralinux
AstraLinux	Astra Linux – Vulnerability in ruby-rails-html-sanitizer	14 Sep 202612:01	–	astralinux
BDU FSTEC	The vulnerability of the Rails Html Sanitizer configuration tool for Rails applications stems from improper handling of input data during web page generation. This allows attackers to perform cross-site scripting attacks.	27 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Rails Html Sanitizer configuration tool for Rails applications stems from improper handling of input data during web page generation. This allows attackers to perform cross-site scripting attacks.	27 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Rails Html Sanitizer configuration tool for Rails applications stems from the inefficient complexity of regular expressions. This allows attackers to trigger a service failure.	27 Aug 202400:00	–	bdu_fstec
Tenable Nessus	Rocky Linux 8 [CIQ] Security Update: libdb-cxx / libdb-cxx-debuginfo / libdb-debuginfo / etc Multiple Vulnerabilities (crlsa-2023_2097)	1 Oct 202600:00	–	nessus
Tenable Nessus	Debian dla-3566 : ruby-rails-html-sanitizer - security update	14 Sep 202300:00	–	nessus
Tenable Nessus	Debian dla-3902 : ruby-rails-html-sanitizer - security update	28 Sep 202400:00	–	nessus
Tenable Nessus	Fedora 40 : rubygem-rails-html-sanitizer (2023-91e69ea326)	29 Apr 202400:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
redos	7.3	x86_64	rubygem-rails-html-sanitizer	1.6.0-1	UNKNOWN

15 Aug 2024 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.5

CVSS 36.1

EPSS0.01521

SSVC