CVE-2018-3741
Published Mar 30, 2018There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output wh…
Vendor/product archive
rubyonrails / html_sanitizer CVEs
Beta · best-effort4 CVEs tagged to rubyonrails / html_sanitizer — 0 Critical, 0 High, 4 Medium, 0 Low, 0 Unrated.
CVE-2015-7580
Published Feb 16, 2016Cross-site scripting (XSS) vulnerability in lib/rails/html/scrubbers.rb in the rails-html-sanitizer gem before 1.0.3 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inj…
CVE-2015-7579
Published Feb 16, 2016Cross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem 1.0.2 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary web script or HTML via a…
CVE-2015-7578
Published Feb 16, 2016Cross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem before 1.0.3 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary web script or HTM…
Showing 1-4 of 4 CVEsPage 1 of 1