[Forgot Password]
Login  Register Subscribe

30481

 
 

423868

 
 

256288

 
 

909

 
 

199146

 
 

282

Paid content will be excluded from the download.


Download | Alert*


oval:org.secpod.oval:def:67106
ruby-loofah: manipulation and transformation of HTML/XML documents and fragments Loofah could be made to perform XSS attacks if a crafted SVG element is republished

oval:org.secpod.oval:def:117876
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments. It's built on top of Nokogiri and libxml2, so it's fast and has a nice API. Loofah excels at HTML sanitization . It includes some nice HTML sanitizers, which are based on HTML5lib's whitelist, ...

oval:org.secpod.oval:def:117871
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments. It's built on top of Nokogiri and libxml2, so it's fast and has a nice API. Loofah excels at HTML sanitization . It includes some nice HTML sanitizers, which are based on HTML5lib's whitelist, ...

oval:org.secpod.oval:def:3300712
SUSE Security Update: Security update for rubygem-loofah

oval:org.secpod.oval:def:69773
It was discovered that ruby-loofah, a general library for manipulating and transforming HTML/XML documents and fragments, was susceptible to cross-site scripting.

oval:org.secpod.oval:def:705615
ruby-loofah: manipulation and transformation of HTML/XML documents and fragments Loofah could be made to perform XSS attacks if a crafted SVG element is republished

oval:org.secpod.oval:def:604580
It was discovered that ruby-loofah, a general library for manipulating and transforming HTML/XML documents and fragments, was susceptible to cross-site scripting.

CPE    1
cpe:/o:debian:debian_linux:9.0
CWE    1
CWE-79
*CVE
CVE-2019-15587

© SecPod Technologies