rails-html-sanitizer Cross-site Scripting vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2015-7580 · ADVISORY
• rails/rails-html-sanitizer commit 63903b0 · WEB
• rails/rails-html-sanitizer · WEB
• groups.google.com/forum/message/raw · WEB
• web.archive.org/web/20160128075017/http://www.securitytracker.com/id/1034816 · WEB
• lists.opensuse.org/opensuse-security-announce/2016-02/msg00014.html · WEB
• lists.opensuse.org/opensuse-security-announce/2016-02/msg00024.html · WEB
• lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html · WEB
• openwall.com/lists/oss-security/2016/01/25/15 · WEB
• securitytracker.com/id/1034816

Mais vulnerabilidades de rails-html-sanitizer

• CVE-2026-73648MÉDIO 5.1rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1, Rails::HTML::PermitScrubber…
• CVE-2024-53988MÉDIO 6.1rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain …
• CVE-2024-53987MÉDIO 6.1rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain …
• CVE-2024-53986MÉDIO 6.1rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain …
• CVE-2024-53985MÉDIO 6.1rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. There is a possible XSS vulnerability with certain …