Lucene search
+L

1 matches found

RubySec
RubySec
added 2016/01/25 12:00 a.m.48 views

XSS vulnerability in rails-html-sanitizer

There is a XSS vulnerability in Rails::Html::FullSanitizer used by Action View's striptags. This vulnerability has been assigned the CVE identifier CVE-2015-7579. Versions Affected: 1.0.2 Not affected: 1.0.0, 1.0.1 Fixed Versions: 1.0.3 Impact ------ Due to the way that Rails::Html::FullSanitizer...

6.1CVSS0.4AI score0.02577EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder