3 matches found
Regular Expression Denial Of Service (ReDoS)
RedCloth is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists in the cleanhtml function of html.rb due to inefficient regular expressions complexity, leading to long parsing times or an application crash...
CVE-2009-4882
Removed by vendor...
CVE-2009-4882
Vulnerability summary (CVE-2009-4882) ZoneCheck CGI (zc.cgi) in ZoneCheck versions 2.0.4-13 and 2.1.0 is affected by a cross-site scripting (XSS) vulnerability due to insufficient input sanitization in the ns parameter to zc.cgi. Exploitation could permit injection of arbitrary script/HTML in the...