Cross-site Scripting (XSS)

🗓️ 17 Jun 2020 09:43:47Reported by Snyk Security DatabaseType

XSS in the sanitize Ruby package affects relaxed and custom configs, enabling unsafe math and svg content.

Reporter	Title	Published	Views	Family All 26
BDU FSTEC	The vulnerability of the Sanitize library for the Ruby programming language stems from deficiencies in the security measures used to protect web page structures. This vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures.	1 Oct 202000:00	–	bdu_fstec
CNVD	Sanitize Cross-Site Scripting Vulnerability	17 Jun 202000:00	–	cnvd
CVE	CVE-2020-4054	16 Jun 202022:10	–	cve
Cvelist	CVE-2020-4054 Cross-site Scripting in Sanitize	16 Jun 202022:10	–	cvelist
Debian	[SECURITY] [DSA 4730-1] ruby-sanitize security update	19 Jul 202019:18	–	debian
Debian	[SECURITY] [DSA 4730-1] ruby-sanitize security update	19 Jul 202019:18	–	debian
Debian CVE	CVE-2020-4054	16 Jun 202022:10	–	debiancve
Tenable Nessus	Debian DSA-4730-1 : ruby-sanitize - security update	20 Jul 202000:00	–	nessus
Tenable Nessus	Ubuntu 20.04 LTS : Sanitize vulnerability (USN-4543-1)	26 Sep 202000:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2020-4054	27 Aug 202500:00	–	nessus