Lucene search
Veracode Vulnerability DatabaseVERACODE:7659HistoryOct 31, 2018 - 3:41 a.m.
Cross-site Scripting (XSS)
2018-10-3103:41:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.001 Low
EPSS
Percentile
28.1%
loofah is vulnerable to a cross-site scripting (XSS) attack. A malicious user can pass an SVG file to the application to inject arbitrary Javascript into a victim’s browser to steal session tokens or perform unwanted actions on behalf of the user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| loofah | le | 2.2.2 | |
| ruby-loofah:buster | eq | 2.2.3-1+deb10u1 |
Related
suse
suse
Security update for rubygem-loofah (moderate)
2018-11-30 00:12:22
Security update for rmt-server (moderate)
2019-02-14 00:00:00
prion
prion
Code injection
2018-10-30 21:29:00
nessus
nessus
Fedora 28 : rubygem-loofah (2018-d716df9942)
2019-01-03 00:00:00
FreeBSD : Loofah -- XSS vulnerability (36a2a89e-7ee1-4ea4-ae22-7ca38019c8d0)
2018-11-02 00:00:00
openSUSE Security Update : rubygem-loofah (openSUSE-2018-1478)
2018-11-30 00:00:00
freebsd
freebsd
Loofah -- XSS vulnerability
2018-10-30 00:00:00
redhatcve
redhatcve
CVE-2018-16468
2018-11-05 21:49:58
osv
osv
ruby-loofah - security update
2019-01-08 00:00:00
CVE-2018-16468
2018-10-30 21:29:00
Loofah Cross-site Scripting vulnerability
2018-11-01 14:46:01
openvas
openvas
Fedora Update for rubygem-loofah FEDORA-2018-4ce40afcb6
2018-12-04 00:00:00
Fedora Update for rubygem-loofah FEDORA-2018-d5fcbb9ca6
2019-05-07 00:00:00
Fedora Update for rubygem-loofah FEDORA-2018-d716df9942
2018-12-04 00:00:00
cvelist
cvelist
CVE-2018-16468
2018-10-30 21:00:00
nvd
nvd
CVE-2018-16468
2018-10-30 21:29:00
github
github
Loofah Cross-site Scripting vulnerability
2018-11-01 14:46:01
debian
debian
[SECURITY] [DSA 4364-1] ruby-loofah security update
2019-01-08 22:48:45
cve
cve
CVE-2018-16468
2018-10-30 21:29:00
fedora
fedora
[SECURITY] Fedora 29 Update: rubygem-loofah-2.2.3-1.fc29
2018-11-28 02:43:14
[SECURITY] Fedora 28 Update: rubygem-loofah-2.0.3-6.fc28
2018-11-28 02:46:20
[SECURITY] Fedora 27 Update: rubygem-loofah-2.0.3-6.fc27
2018-11-28 02:22:42
ubuntucve
ubuntucve
CVE-2018-16468
2018-10-30 00:00:00
debiancve
debiancve
CVE-2018-16468
2018-10-30 21:29:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1966
2021-07-02 18:06:34