Security Advisory

CVE-2018-16468

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-10-30 21:00:00
Last updated 2024-08-05 10:24:32
Assigner hackerone
CVSS score not scored
State PUBLISHED

Description

In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.