GHSA-qc8j-m8j3-rjq6

Опубликовано: 17 сент. 2018

Источник: github

Github: Прошло ревью

Описание

Moderate severity vulnerability that affects rails-html-sanitizer

Withdrawn, accidental duplicate publish.

Cross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem before 1.0.3 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary web script or HTML via crafted tag attributes.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2015-7578
https://github.com/advisories/GHSA-qc8j-m8j3-rjq6

Пакеты

Наименование

rails-html-sanitizer

rubygems

Затронутые версииВерсия исправления

< 1.0.3

1.0.3