File tree Expand file tree Collapse file tree 2 files changed +11
-9
lines changed
gems/rails-html-sanitizer Expand file tree Collapse file tree 2 files changed +11
-9
lines changed Original file line number Diff line number Diff line change @@ -3,7 +3,7 @@ gem: rails-html-sanitizer
3
3
cve : 2022-23519
4
4
ghsa : 9h9g-93gc-623h
5
5
url : https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-9h9g-93gc-623h
6
- title : " Possible XSS vulnerability with certain configurations of rails-html-sanitizer"
6
+ title : Possible XSS vulnerability with certain configurations of rails-html-sanitizer
7
7
date : 2022-12-13
8
8
description : |
9
9
## Summary
@@ -67,9 +67,10 @@ description: |
67
67
## Workarounds
68
68
69
69
Remove "style" from the overridden allowed tags, or remove "math" and "svg" from the overridden allowed tags.
70
+ cvss_v3 : 6.1
70
71
patched_versions :
71
- - " >= 1.4.4"
72
+ - " >= 1.4.4"
72
73
related :
73
74
url :
74
- - https://cwe.mitre.org/data/definitions/79.html
75
- - https://hackerone.com/reports/1656627
75
+ - https://cwe.mitre.org/data/definitions/79.html
76
+ - https://hackerone.com/reports/1656627
Original file line number Diff line number Diff line change @@ -3,7 +3,7 @@ gem: rails-html-sanitizer
3
3
cve : 2022-23520
4
4
ghsa : rrfc-7g8p-99q8
5
5
url : https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-rrfc-7g8p-99q8
6
- title : " Possible XSS vulnerability with certain configurations of rails-html-sanitizer"
6
+ title : Possible XSS vulnerability with certain configurations of rails-html-sanitizer
7
7
date : 2022-12-13
8
8
description : |
9
9
## Summary
@@ -46,11 +46,12 @@ description: |
46
46
## Workarounds
47
47
48
48
Remove either "select" or "style" from the overridden allowed tags.
49
+ cvss_v3 : 6.1
49
50
patched_versions :
50
- - " >= 1.4.4"
51
+ - " >= 1.4.4"
51
52
related :
52
53
cve :
53
- - 2022-32209
54
+ - 2022-32209
54
55
url :
55
- - https://cwe.mitre.org/data/definitions/79.html
56
- - https://hackerone.com/reports/1654310
56
+ - https://cwe.mitre.org/data/definitions/79.html
57
+ - https://hackerone.com/reports/1654310
You can’t perform that action at this time.
0 commit comments