Vulnerability Database
290,020
Total vulnerabilities in the database
Moderate severity vulnerability that affects rails-html-sanitizer
Withdrawn, accidental duplicate publish.
Cross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem 1.0.2 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary web script or HTML via an HTML entity that is mishandled by the Rails::Html::FullSanitizer class.
| Software | From | Fixed in |
|---|---|---|
rails-html-sanitizer
|
1.0.2 | 1.0.2.x |
|
rails-html-sanitizer
|
1.0.2 | 1.0.3 |
No references available.