Описание
In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| ruby-loofah | fixed | 2.2.3-1 | package |
Примечания
https://github.com/flavorjones/loofah/issues/154
https://github.com/flavorjones/loofah/commit/71e4b5434fbcb2ad87643f0c9fecfc3a847943c4 (v2.2.3)
EPSS
Процентиль: 54%
0.00314
Низкий
Связанные уязвимости
CVSS3: 5.4
ubuntu
больше 7 лет назад
In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.
CVSS3: 5.4
redhat
больше 7 лет назад
In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.
CVSS3: 5.4
nvd
больше 7 лет назад
In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.
EPSS
Процентиль: 54%
0.00314
Низкий