CVE-2015-7578 in Ruby on Railsinfo

Zusammenfassung

von MITRE

Cross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem before 1.0.3 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary web script or HTML via crafted tag attributes.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservieren

29.09.2015

Veröffentlichung

15.02.2016

Moderieren

akzeptiert

Eintrag

VDB-80677

CPE

bereit

EPSS

0.02485

KEV

nein

Aktivitäten

very low

Sektor

Energy, Pharma, ...

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2015-7578
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2015-7578
CVE Detailshttps://www.cvedetails.com/cve/CVE-2015-7578/

◂ ZurückÜbersichtWeiter ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!