html_sanitizer Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/html_sanitizer/ Sun, 26 Feb 2023 06:49:48 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png html_sanitizer Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/html_sanitizer/ 32 32 CVE-2018-3741 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-3741/ Sun, 26 Feb 2023 06:49:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-3741/ There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running […]

The post CVE-2018-3741 appeared first on CVE Vulnerability.

]]> There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.

The post CVE-2018-3741 appeared first on CVE Vulnerability.

]]>