Lucene search
K

13 matches found

AstraLinux
AstraLinux
added 2026/06/19 11:10 a.m.4 views

Astra Linux – Vulnerability in ruby-redcloth

A Regular Expression Denial of Service ReDoS issue was discovered in the sanitizehtml function of the redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service DoS by providing a crafted payload...

7.5CVSS7.2AI score0.01513EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2024/09/02 12:0 a.m.15 views

Debian dla-3863 : jupyter-nbconvert - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3863 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3863-1 [email protected] https://www.debian.org/lts/security/...

7.5CVSS6.9AI score0.01102EPSS
Exploits1References4
Gentoo Linux
Gentoo Linux
added 2024/01/10 12:0 a.m.15 views

RedCloth: ReDoS Vulnerability

Background RedCloth is a module for using Textile in Ruby Description A vulnerability has been discovered in RedCloth. Please review the CVE identifier referenced below for details. Impact RedCloth is vulnerable to a regular expression denial of service "ReDoS" attack via the sanitizehtml functio...

7.5CVSS7.2AI score0.01513EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2024/01/10 12:0 a.m.15 views

GLSA-202401-14 : RedCloth: ReDoS Vulnerability

The remote host is affected by the vulnerability described in GLSA-202401-14 RedCloth: ReDoS Vulnerability - A Regular Expression Denial of Service ReDoS issue was discovered in the sanitizehtml function of redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service DoS...

7.5CVSS7.3AI score0.01513EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2023/09/25 12:0 a.m.3 views

The vulnerability of the `sanitize_html` function in Ruby Redcloth software allows a hacker to cause a service failure.

The vulnerability of the sanitizehtml function in Ruby Redcloth text processing software is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

7.8CVSS7.1AI score0.01513EPSS
Exploits1References8Affected Software4
Tenable Nessus
Tenable Nessus
added 2023/07/18 12:0 a.m.12 views

Debian dla-3480 : ruby-redcloth - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3480 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3480-1 [email protected] https://www.debian.org/lts/security/...

7.5CVSS7.2AI score0.01513EPSS
Exploits1References4
Snyk
Snyk
added 2023/06/07 11:41 a.m.1 views

Regular Expression Denial of Service (ReDoS)

Overview RedCloth is a Textile parser for Ruby. Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS in the sanitizehtml function. Exploiting this vulnerability is possible by supplying a crafted payload. Details Denial of Service DoS describes a family o...

7.5CVSS6.8AI score0.01513EPSS
Exploits1References2
Github Security Blog
Github Security Blog
added 2023/06/06 6:30 p.m.19 views

RedCloth Regular Expression Denial of Service issue

A Regular Expression Denial of Service ReDoS issue was discovered in the sanitizehtml function of RedCloth gem. This vulnerability allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS7.2AI score0.01513EPSS
Exploits1References10Affected Software1
OSV
OSV
added 2023/06/06 6:30 p.m.15 views

GHSA-QCM3-VFQ5-WFR2 RedCloth Regular Expression Denial of Service issue

A Regular Expression Denial of Service ReDoS issue was discovered in the sanitizehtml function of RedCloth gem. This vulnerability allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS7.1AI score0.01513EPSS
Exploits1References9
NVD
NVD
added 2023/06/06 5:15 p.m.14 views

CVE-2023-31606

A Regular Expression Denial of Service ReDoS issue was discovered in the sanitizehtml function of redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS7.2AI score0.01513EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2023/06/06 5:15 p.m.3 views

CVE-2023-31606

A Regular Expression Denial of Service ReDoS issue was discovered in the sanitizehtml function of redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS7.1AI score0.01513EPSS
Exploits1References6
OSV
OSV
added 2023/06/06 5:15 p.m.2 views

DEBIAN-CVE-2023-31606

A Regular Expression Denial of Service ReDoS issue was discovered in the sanitizehtml function of redcloth gem v4.0.0. This vulnerability allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS7.2AI score0.01513EPSS
Exploits1References1
RubySec
RubySec
added 2023/06/06 12:0 a.m.20 views

RedCloth Regular Expression Denial of Service issue

A Regular Expression Denial of Service ReDoS issue was discovered in the "sanitizehtml" function of RedCloth gem = v4.0.0. This vulnerability allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

7.5CVSS6.7AI score0.01513EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder