Lucene search
GoogleOSV:GHSA-G4XQ-JX4W-4CJVHistoryNov 01, 2018 - 2:46 p.m.
Loofah Cross-site Scripting vulnerability
2018-11-0114:46:01
Google
osv.dev
14
0.001 Low
EPSS
Percentile
28.1%
In the Loofah gem for Ruby, through version 2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished. Users are advised to upgrade to version 2.2.3.
See https://github.com/flavorjones/loofah/issues/154 for more details.
Related
suse
suse
Security update for rubygem-loofah (moderate)
2018-11-30 00:12:22
Security update for rmt-server (moderate)
2019-02-14 00:00:00
prion
prion
Code injection
2018-10-30 21:29:00
nessus
nessus
Fedora 28 : rubygem-loofah (2018-d716df9942)
2019-01-03 00:00:00
FreeBSD : Loofah -- XSS vulnerability (36a2a89e-7ee1-4ea4-ae22-7ca38019c8d0)
2018-11-02 00:00:00
openSUSE Security Update : rubygem-loofah (openSUSE-2018-1478)
2018-11-30 00:00:00
freebsd
freebsd
Loofah -- XSS vulnerability
2018-10-30 00:00:00
redhatcve
redhatcve
CVE-2018-16468
2018-11-05 21:49:58
osv
osv
ruby-loofah - security update
2019-01-08 00:00:00
CVE-2018-16468
2018-10-30 21:29:00
openvas
openvas
Fedora Update for rubygem-loofah FEDORA-2018-4ce40afcb6
2018-12-04 00:00:00
openSUSE: Security Advisory for rubygem-loofah (openSUSE-SU-2018:3951-1)
2018-12-04 00:00:00
Discourse < 2.2.0.beta4 Multiple Vulnerabilities
2019-01-29 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2018-10-31 03:41:40
cvelist
cvelist
CVE-2018-16468
2018-10-30 21:00:00
nvd
nvd
CVE-2018-16468
2018-10-30 21:29:00
debian
debian
[SECURITY] [DSA 4364-1] ruby-loofah security update
2019-01-08 22:48:45
github
github
Loofah Cross-site Scripting vulnerability
2018-11-01 14:46:01
cve
cve
CVE-2018-16468
2018-10-30 21:29:00
fedora
fedora
[SECURITY] Fedora 29 Update: rubygem-loofah-2.2.3-1.fc29
2018-11-28 02:43:14
[SECURITY] Fedora 28 Update: rubygem-loofah-2.0.3-6.fc28
2018-11-28 02:46:20
[SECURITY] Fedora 27 Update: rubygem-loofah-2.0.3-6.fc27
2018-11-28 02:22:42
ubuntucve
ubuntucve
CVE-2018-16468
2018-10-30 00:00:00
debiancve
debiancve
CVE-2018-16468
2018-10-30 21:29:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1966
2021-07-02 18:06:34