Lucene search
K

63 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в ruby-redcloth

A Regular Expression Denial of Service ReDoS issue was discovered in the sanitizehtml function of the redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service DoS by providing a crafted payload...

7.5CVSS7.1AI score0.00912EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-0295

Malware in sbrugna...

4.3CVSS8.9AI score0.00593EPSS
Exploits1References11
Tenable Nessus
Tenable Nessus
added 2024/01/10 12:0 a.m.15 views

GLSA-202401-14 : RedCloth: ReDoS Vulnerability

The remote host is affected by the vulnerability described in GLSA-202401-14 RedCloth: ReDoS Vulnerability - A Regular Expression Denial of Service ReDoS issue was discovered in the sanitizehtml function of redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service DoS...

7.5CVSS7.3AI score0.00912EPSS
Exploits1References3
Mageia
Mageia
added 2023/10/20 8:34 a.m.34 views

Updated ruby-RedCloth packages fix a security vulnerability

A Regular Expression Denial of Service ReDoS issue was discovered in the sanitizehtml function of redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service DoS via supplying a crafted payload. CVE-2023-31606...

7.5CVSS6.8AI score0.00912EPSS
Exploits1References2
OSV
OSV
added 2023/10/20 8:34 a.m.5 views

MGASA-2023-0291 Updated ruby-RedCloth packages fix a security vulnerability

A Regular Expression Denial of Service ReDoS issue was discovered in the sanitizehtml function of redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service DoS via supplying a crafted payload. CVE-2023-31606...

7.5CVSS7.3AI score0.00912EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2023/10/20 12:0 a.m.12 views

Mageia: Security Advisory (MGASA-2023-0291)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.00912EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2023/09/13 12:0 a.m.8 views

Ubuntu: Security Advisory (USN-6358-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.00912EPSS
Exploits1References2
OSV
OSV
added 2023/09/12 6:54 a.m.1 views

USN-6358-1 ruby-redcloth vulnerability

It was discovered that RedCloth incorrectly handled certain inputs during html sanitisation. An attacker could possibly use this issue to cause a denial of service...

7.5CVSS7.1AI score0.00912EPSS
Exploits1References2
Ubuntu
Ubuntu
added 2023/09/12 6:54 a.m.36 views

USN-6358-1: RedCloth vulnerability

It was discovered that RedCloth incorrectly handled certain inputs during html sanitisation. An attacker could possibly use this issue to cause a denial of service...

7.5CVSS7.2AI score0.00912EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2023/09/12 12:0 a.m.11 views

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : RedCloth vulnerability (USN-6358-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 host has a package installed that is affected by a vulnerability as referenced in the USN-6358-1 advisory. It was discovered that RedCloth incorrectly handled certain inputs during html sanitisation. An attacker could possibl...

7.5CVSS7.3AI score0.00912EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2023/07/20 7:44 p.m.28 views

CVE-2023-31606

The HTML sanitizer function in Rubygems' Redcloth incorrectly handles regular expression inputs. This issue could allow an attacker to send a malicious regexp to the server and cause a denial of service...

7.5CVSS6.5AI score0.00912EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2023/07/18 12:0 a.m.11 views

Debian dla-3480 : ruby-redcloth - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3480 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3480-1 [email protected] https://www.debian.org/lts/security/...

7.5CVSS7.2AI score0.00912EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2023/07/18 12:0 a.m.10 views

Debian: Security Advisory (DLA-3480-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.00912EPSS
Exploits1References4
Debian
Debian
added 2023/07/06 10:9 p.m.10 views

[SECURITY] [DLA 3480-1] ruby-redcloth security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3480-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès July 06, 2023 https://wiki.debian.org/LTS -...

7.5CVSS7.2AI score0.00912EPSS
Exploits1
OSV
OSV
added 2023/07/06 12:0 a.m.10 views

DLA-3480-1 ruby-redcloth - security update

Bulletin has no description...

7.5CVSS7.3AI score0.00912EPSS
Exploits1
Veracode
Veracode
added 2023/06/08 9:2 a.m.10 views

Regular Expression Denial Of Service (ReDoS)

RedCloth is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists in the cleanhtml function of html.rb due to inefficient regular expressions complexity, leading to long parsing times or an application crash...

7.5CVSS6.8AI score0.00912EPSS
Exploits1References7Affected Software2
Snyk
Snyk
added 2023/06/07 11:41 a.m.1 views

Regular Expression Denial of Service (ReDoS)

Overview RedCloth is a Textile parser for Ruby. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in the sanitizehtml function. Exploiting this vulnerability is possible by supplying a crafted payload. Details Denial of Service DoS describes a family o...

7.5CVSS6.8AI score0.00912EPSS
Exploits1References2
OSV
OSV
added 2023/06/06 6:30 p.m.15 views

GHSA-QCM3-VFQ5-WFR2 RedCloth Regular Expression Denial of Service issue

A Regular Expression Denial of Service ReDoS issue was discovered in the sanitizehtml function of RedCloth gem. This vulnerability allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS7.1AI score0.00912EPSS
Exploits1References9
Github Security Blog
Github Security Blog
added 2023/06/06 6:30 p.m.16 views

RedCloth Regular Expression Denial of Service issue

A Regular Expression Denial of Service ReDoS issue was discovered in the sanitizehtml function of RedCloth gem. This vulnerability allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS7.2AI score0.00912EPSS
Exploits1References10Affected Software1
OSV
OSV
added 2023/06/06 5:15 p.m.16 views

CVE-2023-31606

A Regular Expression Denial of Service ReDoS issue was discovered in the sanitizehtml function of redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS6.8AI score0.00912EPSS
Exploits1References5
Rows per page
Query Builder