CVE-2019-15587

Опубликовано: 22 окт. 2019

Источник: debian

EPSS Низкий

Описание

In the Loofah gem for Ruby through v2.3.0 unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.

Пакет	Статус	Версия исправления	Релиз	Тип
ruby-loofah	fixed	2.3.1+dfsg-1		package

EPSS

Процентиль: 73%

0.01561

Низкий

CVE-2019-15587

CVSS3: 5.4

ubuntu

почти 7 лет назад

In the Loofah gem for Ruby through v2.3.0 unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.

CVE-2019-15587

CVSS3: 4.6

redhat

почти 7 лет назад

In the Loofah gem for Ruby through v2.3.0 unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.

CVE-2019-15587

CVSS3: 5.4

nvd

почти 7 лет назад

In the Loofah gem for Ruby through v2.3.0 unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.

SUSE-SU-2022:3868-1

suse-cvrf

почти 4 года назад

Security update for rubygem-loofah

GHSA-c3gv-9cxf-6f57

CVSS3: 5.4

github

почти 7 лет назад

Loofah Allows Cross-site Scripting

EPSS

Процентиль: 73%

0.01561

Низкий