Lucene search
RubySecRUBY:RAILS-HTML-SANITIZER-2018-3741HistoryMar 21, 2018 - 9:00 p.m.
XSS vulnerability in rails-html-sanitizer
2018-03-2121:00:00
RubySec
rubysec.com
9
There is a possible XSS vulnerability in rails-html-sanitizer. The gem allows
non-whitelisted attributes to be present in sanitized output when input with
specially-crafted HTML fragments, and these attributes can lead to an XSS attack
on target applications.
This issue is similar to CVE-2018-8048 in Loofah.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rails-html-sanitizer | lt | 1.0.4 |
Related
nessus
nessus
Debian DSA-4171-1 : ruby-loofah - security update
2018-04-16 00:00:00
FreeBSD : Loofah -- XSS vulnerability (ba6d0c9b-f5f6-4b9b-a6de-3cce93c83220)
2018-03-21 00:00:00
osv
osv
Cross-site Scripting in loofah
2018-03-21 11:57:11
CVE-2018-8048
2018-03-27 17:29:00
ruby-loofah - security update
2018-04-13 00:00:00
redhatcve
redhatcve
CVE-2018-8048
2020-04-06 17:05:35
CVE-2018-3741
2018-04-18 10:49:01
veracode
veracode
Cross-site Scripting (XSS)
2018-03-20 05:38:48
cve
cve
CVE-2018-8048
2018-03-27 17:29:00
CVE-2018-3741
2018-03-30 19:29:00
prion
prion
Hardcoded credentials
2018-03-27 17:29:00
Design/Logic Flaw
2018-03-30 19:29:00
debian
debian
[SECURITY] [DSA 4171-1] ruby-loofah security update
2018-04-13 19:12:44
[SECURITY] [DSA 4171-1] ruby-loofah security update
2018-04-13 19:12:19
debiancve
debiancve
CVE-2018-8048
2018-03-27 17:29:00
CVE-2018-3741
2018-03-30 19:29:00
openvas
openvas
Debian: Security Advisory (DSA-4171-1)
2018-04-12 00:00:00
ubuntucve
ubuntucve
CVE-2018-8048
2018-03-27 00:00:00
CVE-2018-3741
2018-03-30 00:00:00
freebsd
freebsd
Loofah -- XSS vulnerability
2018-03-15 00:00:00
rails-html-sanitizer -- possible XSS vulnerability
2018-03-22 00:00:00
github
github
Cross-site Scripting in loofah
2018-03-21 11:57:11
rails-html-sanitizer Cross-site Scripting vulnerability
2018-04-26 15:41:10
hackerone
hackerone
Ruby on Rails: XSS vulnerability in sanitize-method when parsing link's href
2018-03-21 14:57:43
rubygems
rubygems
Revert libxml2 behavior in Nokogiri gem that could cause XSS
2018-03-28 21:00:00
redhat
redhat
rosalinux
rosalinux
Advisory ROSA-SA-2021-1966
2021-07-02 18:06:34
Related for RUBY:RAILS-HTML-SANITIZER-2018-3741