CVE-2018-3740

Published March 30th, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

5

MEDIUM

Affected

1

PROJECT

Description

A specially crafted HTML fragment can cause Sanitize gem for Ruby to allow non-whitelisted attributes to be used on a whitelisted HTML element.

rgrove/sanitize

Ruby HTML and CSS sanitizer.

GitHub

2.06K