rails-html-sanitizer Cross-site Scripting vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2015-7578 · ADVISORY
• rails/rails-html-sanitizer commit 297161e · WEB
• rails/rails-html-sanitizer · WEB
• groups.google.com/forum/message/raw · WEB
• web.archive.org/web/20160128075017/http://www.securitytracker.com/id/1034816 · WEB
• lists.fedoraproject.org/pipermail/package-announce/2016-February/178046.html · WEB
• lists.fedoraproject.org/pipermail/package-announce/2016-February/178064.html · WEB
• lists.opensuse.org/opensuse-security-announce/2016-02/msg00014.html · WEB
• lists.opensuse.org/opensuse-security-announce/2016-02/msg00024.html · WEB
• lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html

Mais vulnerabilidades de rails-html-sanitizer

• CVE-2026-73648MÉDIO 5.1rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1, Rails::HTML::PermitScrubber…
• CVE-2024-53988MÉDIO 6.1rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain …
• CVE-2024-53987MÉDIO 6.1rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain …
• CVE-2024-53986MÉDIO 6.1rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain …
• CVE-2024-53985MÉDIO 6.1rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain …