CVE-2018-16468

Опубликовано: 30 окт. 2018

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.

Ссылки

https://github.com/flavorjones/loofah/issues/154
Third Party Advisory
https://www.debian.org/security/2019/dsa-4364
Third Party Advisory
https://github.com/flavorjones/loofah/issues/154
Third Party Advisory
https://www.debian.org/security/2019/dsa-4364
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:loofah_project:loofah:*:*:*:*:*:ruby:*:*

Версия до 2.2.2 (включая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 54%

0.00314

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2018-16468

CVSS3: 5.4

ubuntu

больше 7 лет назад

In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.

CVE-2018-16468

CVSS3: 5.4

redhat

больше 7 лет назад

In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.

CVE-2018-16468

CVSS3: 5.4

debian

больше 7 лет назад

In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may ...

openSUSE-SU-2018:3951-1

suse-cvrf

около 7 лет назад

Security update for rubygem-loofah

SUSE-SU-2018:3928-1

suse-cvrf

около 7 лет назад

Security update for rubygem-loofah

EPSS

Процентиль: 54%

0.00314

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79