Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:GHSA-X7RV-CR6V-4VM4
HistoryMar 21, 2018 - 11:57 a.m.

Cross-site Scripting in loofah

2018-03-2111:57:11
Google
osv.dev
15

0.002 Low

EPSS

Percentile

59.1%

JSON

Loofah allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments.

Users are affected if running Loofah < 2.2.1, but only:

  • when running on MRI or RBX,
  • in combination with libxml2 >= 2.9.2.

JRuby users are not affected.

Related

debiancve 2
debian 2
prion 2
cvelist 2
nessus 3
openvas 1
cve 2
redhatcve 2
veracode 1
freebsd 2
ubuntucve 2
github 2
osv 4
nvd 2
rubygems 2
hackerone 1
redhat 1
rosalinux 1
debiancve
debiancve
CVE-2018-8048
2018-03-27 17:29:00
CVE-2018-3741
2018-03-30 19:29:00
debian
debian
[SECURITY] [DSA 4171-1] ruby-loofah security update
2018-04-13 19:12:19
[SECURITY] [DSA 4171-1] ruby-loofah security update
2018-04-13 19:12:19
prion
prion
Hardcoded credentials
2018-03-27 17:29:00
Design/Logic Flaw
2018-03-30 19:29:00
cvelist
cvelist
CVE-2018-8048
2018-03-27 17:00:00
CVE-2018-3741
2018-03-30 19:00:00
nessus
nessus
FreeBSD : Loofah -- XSS vulnerability (ba6d0c9b-f5f6-4b9b-a6de-3cce93c83220)
2018-03-21 00:00:00
Debian DSA-4171-1 : ruby-loofah - security update
2018-04-16 00:00:00
FreeBSD : rails-html-sanitizer -- possible XSS vulnerability (81946ace-6961-4488-a164-22d58ebc8d66)
2018-03-27 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-4171-1)
2018-04-12 00:00:00
cve
cve
CVE-2018-8048
2018-03-27 17:29:00
CVE-2018-3741
2018-03-30 19:29:00
redhatcve
redhatcve
CVE-2018-8048
2020-04-06 17:05:35
CVE-2018-3741
2018-04-18 10:49:01
veracode
veracode
Cross-site Scripting (XSS)
2018-03-20 05:38:48
freebsd
freebsd
Loofah -- XSS vulnerability
2018-03-15 00:00:00
rails-html-sanitizer -- possible XSS vulnerability
2018-03-22 00:00:00
ubuntucve
ubuntucve
CVE-2018-8048
2018-03-27 00:00:00
CVE-2018-3741
2018-03-30 00:00:00
github
github
Cross-site Scripting in loofah
2018-03-21 11:57:11
rails-html-sanitizer Cross-site Scripting vulnerability
2018-04-26 15:41:10
osv
osv
ruby-loofah - security update
2018-04-13 00:00:00
CVE-2018-8048
2018-03-27 17:29:00
rails-html-sanitizer Cross-site Scripting vulnerability
2018-04-26 15:41:10
nvd
nvd
CVE-2018-8048
2018-03-27 17:29:00
CVE-2018-3741
2018-03-30 19:29:00
rubygems
rubygems
XSS vulnerability in rails-html-sanitizer
2018-03-21 21:00:00
Revert libxml2 behavior in Nokogiri gem that could cause XSS
2018-03-28 21:00:00
hackerone
hackerone
Ruby on Rails: XSS vulnerability in sanitize-method when parsing link's href
2018-03-21 14:57:43
redhat
redhat
(RHSA-2019:0212) Moderate: CloudForms 4.7 security, bug fix and enhancement update
2019-02-07 22:50:40
rosalinux
rosalinux
Advisory ROSA-SA-2021-1966
2021-07-02 18:06:34

0.002 Low

EPSS

Percentile

59.1%

JSON
Related for OSV:GHSA-X7RV-CR6V-4VM4
debiancve2debian2prion2cvelist2nessus3openvas1cve2redhatcve2veracode1freebsd2ubuntucve2github2osv4nvd2rubygems2hackerone1redhat1rosalinux1