Lucene search

K
RubyonrailsRails Html Sanitizers

10 matches found

CVE
CVE
added 2022/12/14 5:15 p.m.185 views

CVE-2022-23517

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Certain configurations of rails-html-sanitizer

7.5CVSS7.2AI score0.00114EPSS
CVE
CVE
added 2022/12/14 6:15 p.m.155 views

CVE-2022-23520

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Prior to version 1.4.4, there is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer due to an incomplete fix of CVE-2022-32209. Rails::Html::Sanitizer may allow an attacker to in...

6.1CVSS6.3AI score0.02846EPSS
CVE
CVE
added 2022/06/24 3:15 p.m.146 views

CVE-2022-32209

Possible XSS Vulnerability in Rails::Html::SanitizerThere is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer.This vulnerability has been assigned the CVE identifier CVE-2022-32209.Versions Affected: ALLNot affected: NONEFixed Versions: v1.4.3## ImpactA possible XS...

6.1CVSS6AI score0.02846EPSS
CVE
CVE
added 2022/12/14 5:15 p.m.140 views

CVE-2022-23519

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Prior to version 1.4.4, a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer may allow an attacker to inject content if the application developer has overridden the sanitizer's all...

7.2CVSS6.4AI score0.001EPSS
CVE
CVE
added 2022/12/14 5:15 p.m.126 views

CVE-2022-23518

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Versions >= 1.0.3, = 2.1.0. This issue is patched in version 1.4.4.

6.1CVSS6.1AI score0.00112EPSS
CVE
CVE
added 2024/12/02 10:15 p.m.64 views

CVE-2024-53988

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain configurations of Rails::HTML::Sanitizer 1.6.0 when used with Rails >= 7.1.0. A possible XSS vulnerability with certain configurations of Rails::HTML::Sanit...

6.1CVSS5.6AI score0.00169EPSS
CVE
CVE
added 2024/12/02 9:15 p.m.60 views

CVE-2024-53989

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain configurations of Rails::HTML::Sanitizer 1.6.0 when used with Rails >= 7.1.0. A possible XSS vulnerability with certain configurations of Rails::HTML::Sanit...

6.1CVSS5.6AI score0.00169EPSS
CVE
CVE
added 2024/12/02 10:15 p.m.46 views

CVE-2024-53985

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain configurations of Rails::HTML::Sanitizer 1.6.0 when used with Rails >= 7.1.0 and Nokogiri < 1.15.7, or 1.16.x

6.1CVSS5.5AI score0.0021EPSS
CVE
CVE
added 2024/12/02 10:15 p.m.45 views

CVE-2024-53986

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain configurations of Rails::HTML::Sanitizer 1.6.0 when used with Rails >= 7.1.0. A possible XSS vulnerability with certain configurations of Rails::HTML::Sanit...

6.1CVSS5.6AI score0.00169EPSS
CVE
CVE
added 2024/12/02 10:15 p.m.44 views

CVE-2024-53987

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain configurations of Rails::HTML::Sanitizer 1.6.0 when used with Rails >= 7.1.0. A possible XSS vulnerability with certain configurations of Rails::HTML::Sanit...

6.1CVSS5.6AI score0.00169EPSS