Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Rails Component: Html Sanitizer Clear all filters
TI-2018-02738 CVE-2018-3741 · GHSA-px3r-jm9g-c8w8

Cross-site scripting in rails-html-sanitizer

Priority LOW 30

There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01253 Published 2018-03-30 Partial fix · 1.0.4 CWE-79
TI-2015-06304 CVE-2015-7580 · GHSA-ghqm-pgxj-37gq

Cross-site scripting (XSS) vulnerability in lib/rails/html/scrubbers.rb in the…

Priority LOW 32

Cross-site scripting (XSS) vulnerability in lib/rails/html/scrubbers.rb in the rails-html-sanitizer gem before 1.0.3 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary web script or HTML via a cr…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02188 Published 2016-02-16 Fixed in 1.0.3 CWE-79
TI-2015-06303 CVE-2015-7579 · GHSA-r9c2-cr39-c8g6

Cross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem 1.0.2 for Ruby…

Priority LOW 32

Cross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem 1.0.2 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary web script or HTML via an HTML entity that is mishandled by the R…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02577 Published 2016-02-16 Fixed in 1.0.3 CWE-79