Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 10

Количество 10

fstec логотип

BDU:2024-06514

почти 4 года назад

Уязвимость реализации конфигурации инструмента очистки HTML для приложений Rails Rails Html Sanitizer, связанная с неэффективной сложностью регулярных выражений, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
EPSS: Низкий
redos логотип

ROS-20240815-13

около 2 лет назад

Множественные уязвимости rubygem-rails-html-sanitizer

CVSS3: 7.5
EPSS: Низкий
altlinux логотип

ALT-PU-2023-1337

больше 3 лет назад

ALT-PU-2023-1337: package `gem-rails-html-sanitizer` update to version 1.5.0-alt1

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2022-23517

почти 4 года назад

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Certain configurations of rails-html-sanitizer < 1.4.4 use an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. This may lead to a denial of service through CPU resource consumption. This issue has been patched in version 1.4.4.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2022-23517

почти 4 года назад

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Certain configurations of rails-html-sanitizer < 1.4.4 use an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. This may lead to a denial of service through CPU resource consumption. This issue has been patched in version 1.4.4.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2022-23517

почти 4 года назад

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Certain configurations of rails-html-sanitizer < 1.4.4 use an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. This may lead to a denial of service through CPU resource consumption. This issue has been patched in version 1.4.4.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2022-23517

почти 4 года назад

rails-html-sanitizer is responsible for sanitizing HTML fragments in R ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-5x79-w82f-gw8w

почти 4 года назад

Inefficient Regular Expression Complexity in rails-html-sanitizer

CVSS3: 7.5
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:3714-1

около 3 лет назад

Security update for rubygem-rails-html-sanitizer

EPSS: Низкий
altlinux логотип

ALT-PU-2023-4269

около 3 лет назад

ALT-PU-2023-4269: package `gem-rails-html-sanitizer` update to version 1.5.0-alt1

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2024-06514

Уязвимость реализации конфигурации инструмента очистки HTML для приложений Rails Rails Html Sanitizer, связанная с неэффективной сложностью регулярных выражений, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
2%
Низкий
почти 4 года назад
redos логотип
ROS-20240815-13

Множественные уязвимости rubygem-rails-html-sanitizer

CVSS3: 7.5
около 2 лет назад
altlinux логотип
ALT-PU-2023-1337

ALT-PU-2023-1337: package `gem-rails-html-sanitizer` update to version 1.5.0-alt1

CVSS3: 7.5
больше 3 лет назад
ubuntu логотип
CVE-2022-23517

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Certain configurations of rails-html-sanitizer < 1.4.4 use an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. This may lead to a denial of service through CPU resource consumption. This issue has been patched in version 1.4.4.

CVSS3: 7.5
2%
Низкий
почти 4 года назад
redhat логотип
CVE-2022-23517

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Certain configurations of rails-html-sanitizer < 1.4.4 use an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. This may lead to a denial of service through CPU resource consumption. This issue has been patched in version 1.4.4.

CVSS3: 7.5
2%
Низкий
почти 4 года назад
nvd логотип
CVE-2022-23517

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Certain configurations of rails-html-sanitizer < 1.4.4 use an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. This may lead to a denial of service through CPU resource consumption. This issue has been patched in version 1.4.4.

CVSS3: 7.5
2%
Низкий
почти 4 года назад
debian логотип
CVE-2022-23517

rails-html-sanitizer is responsible for sanitizing HTML fragments in R ...

CVSS3: 7.5
2%
Низкий
почти 4 года назад
github логотип
GHSA-5x79-w82f-gw8w

Inefficient Regular Expression Complexity in rails-html-sanitizer

CVSS3: 7.5
2%
Низкий
почти 4 года назад
suse-cvrf логотип
SUSE-SU-2023:3714-1

Security update for rubygem-rails-html-sanitizer

около 3 лет назад
altlinux логотип
ALT-PU-2023-4269

ALT-PU-2023-4269: package `gem-rails-html-sanitizer` update to version 1.5.0-alt1

CVSS3: 7.5
около 3 лет назад

Уязвимостей на страницу