rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Prior to version 1.4.4, a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer may allow an attacker to inject content if the application developer has overridden the sanitizer's allowed tags in either of the following ways: allow both "math" and "style" elements, or allow both "svg" and "style" elements. Code is only impacted if allowed tags are being overridden. . This issue is fixed in version 1.4.4. All users overriding the allowed tags to include "math" or "svg" and "style" should either upgrade or use the following workaround immediately: Remove "style" from the overridden allowed tags, or remove "math" and "svg" from the overridden allowed tags.
CVSS Details
- CVSS 3.1 Base Score: 7.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-powerbarUpgrade rubygem-ffiUpgrade rubygem-multi_jsonUpgrade rubygem-ffi-debugsourceUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-mime-typesUpgrade rubygem-snaky_hashUpgrade satellite-cliUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-http-cookieUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade satellite-maintainUpgrade rubygem-fast_gettextUpgrade rubygem-http-acceptUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unf_extUpgrade rubygem-netrcUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-ffi-debuginfoUpgrade rubygem-jwtUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade python39-pulp_manifestUpgrade rubygem-highlineUpgrade rubygem-domain_nameUpgrade rubygem-apipie-bindingsUpgrade foreman-cliUpgrade rubygem-oauth-ttyUpgrade rubygem-hammer_cli_foreman_googleUpgrade satellite-cloneUpgrade rubygem-little-pluggerUpgrade rubygem-oauthUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-amazing_printUpgrade rubygem-hashieUpgrade rubygem-rest-clientUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unicodeUpgrade rubygem-unfUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cliUpgrade rubygem-mime-types-dataUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_admin | May 4, 2023 | Dec 14, 2022 |
| Debian | — | Upgrade ruby-rails-html-sanitizer | Sep 15, 2023 | Dec 14, 2022 |
| Redhat_linux | — | Upgrade rubygem-version_gemUpgrade rubygem-mime-typesUpgrade rubygem-little-pluggerUpgrade satellite-cliUpgrade rubygem-unicode-debugsourceUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-multi_jsonUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unf_ext-debugsourceUpgrade satellite-maintainUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-ffiUpgrade rubygem-unicode-debuginfoUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-localeUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-gssapiUpgrade rubygem-hammer_cliUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-powerbarUpgrade rubygem-apipie-bindingsUpgrade rubygem-jwtUpgrade rubygem-unicodeUpgrade rubygem-oauth-ttyUpgrade rubygem-unfUpgrade rubygem-http-cookieUpgrade rubygem-domain_nameUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-unf_extUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hashieUpgrade rubygem-loggingUpgrade rubygem-oauthUpgrade rubygem-fast_gettextUpgrade python39-pulp_manifestUpgrade rubygem-mime-types-dataUpgrade foreman-cliUpgrade rubygem-rest-clientUpgrade rubygem-unf_ext-debuginfoUpgrade satellite-cloneUpgrade rubygem-ffi-debuginfo | May 4, 2023 | Dec 14, 2022 |
| Rocky_linux | — | Upgrade libdb-utils-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-debugsourceUpgrade libdb-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxx | Mar 12, 2024 | Dec 14, 2022 |
| Ruby_on_rails | — | Upgrade to the latest version of Ruby on Rails | Feb 7, 2024 | Dec 14, 2022 |
| Suse | — | Upgrade ruby2.5-rubygem-rails-html-sanitizer-testsuiteUpgrade ruby2.5-rubygem-rails-html-sanitizer-docUpgrade ruby2.5-rubygem-rails-html-sanitizer | Sep 21, 2023 | Dec 14, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub