Security Advisory

CVE-2018-8048

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-03-27 17:00:00

Last updated 2024-08-05 06:46:13

Assigner mitre

CVSS score not scored

State PUBLISHED

In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.