Lucene search
GoogleOSV:CVE-2018-8048HistoryMar 27, 2018 - 5:29 p.m.
CVE-2018-8048
2018-03-2717:29:00
Google
osv.dev
3
0.002 Low
EPSS
Percentile
59.1%
In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.
Related
nessus
nessus
FreeBSD : Loofah -- XSS vulnerability (ba6d0c9b-f5f6-4b9b-a6de-3cce93c83220)
2018-03-21 00:00:00
Debian DSA-4171-1 : ruby-loofah - security update
2018-04-16 00:00:00
debian
debian
[SECURITY] [DSA 4171-1] ruby-loofah security update
2018-04-13 19:12:19
[SECURITY] [DSA 4171-1] ruby-loofah security update
2018-04-13 19:12:19
openvas
openvas
Debian: Security Advisory (DSA-4171-1)
2018-04-12 00:00:00
prion
prion
Hardcoded credentials
2018-03-27 17:29:00
Design/Logic Flaw
2018-03-30 19:29:00
debiancve
debiancve
CVE-2018-8048
2018-03-27 17:29:00
CVE-2018-3741
2018-03-30 19:29:00
cvelist
cvelist
CVE-2018-8048
2018-03-27 17:00:00
CVE-2018-3741
2018-03-30 19:00:00
cve
cve
CVE-2018-8048
2018-03-27 17:29:00
CVE-2018-3741
2018-03-30 19:29:00
redhatcve
redhatcve
CVE-2018-8048
2020-04-06 17:05:35
CVE-2018-3741
2018-04-18 10:49:01
osv
osv
Cross-site Scripting in loofah
2018-03-21 11:57:11
ruby-loofah - security update
2018-04-13 00:00:00
rails-html-sanitizer Cross-site Scripting vulnerability
2018-04-26 15:41:10
veracode
veracode
Cross-site Scripting (XSS)
2018-03-20 05:38:48
freebsd
freebsd
Loofah -- XSS vulnerability
2018-03-15 00:00:00
rails-html-sanitizer -- possible XSS vulnerability
2018-03-22 00:00:00
ubuntucve
ubuntucve
CVE-2018-8048
2018-03-27 00:00:00
CVE-2018-3741
2018-03-30 00:00:00
github
github
Cross-site Scripting in loofah
2018-03-21 11:57:11
rails-html-sanitizer Cross-site Scripting vulnerability
2018-04-26 15:41:10
nvd
nvd
CVE-2018-8048
2018-03-27 17:29:00
CVE-2018-3741
2018-03-30 19:29:00
rubygems
rubygems
XSS vulnerability in rails-html-sanitizer
2018-03-21 21:00:00
Revert libxml2 behavior in Nokogiri gem that could cause XSS
2018-03-28 21:00:00
hackerone
hackerone
Ruby on Rails: XSS vulnerability in sanitize-method when parsing link's href
2018-03-21 14:57:43
redhat
redhat
rosalinux
rosalinux
Advisory ROSA-SA-2021-1966
2021-07-02 18:06:34