rails-html-sanitizer Cross-site Scripting vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2015-7580 · ADVISORY
• rails/rails-html-sanitizer commit 63903b0 · WEB
• rails/rails-html-sanitizer · WEB
• groups.google.com/forum/message/raw · WEB
• web.archive.org/web/20160128075017/http://www.securitytracker.com/id/1034816 · WEB
• lists.opensuse.org/opensuse-security-announce/2016-02/msg00014.html · WEB
• lists.opensuse.org/opensuse-security-announce/2016-02/msg00024.html · WEB
• lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html · WEB
• openwall.com/lists/oss-security/2016/01/25/15 · WEB
• securitytracker.com/id/1034816

rails-html-sanitizer のその他の脆弱性

• CVE-2026-73648中 5.1rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1, Rails::HTML::PermitScrubber…
• CVE-2024-53988中 6.1rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain …
• CVE-2024-53987中 6.1rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain …
• CVE-2024-53986中 6.1rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain …
• CVE-2024-53985中 6.1rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain …