NuytsTech Security

CVE-2015-7578

by ·

Cross-site scripting (XSS) vulnerability in the rails-html-sanitizer gem before 1.0.3 for Ruby on Rails 4.2.x and 5.x allows remote attackers to inject arbitrary web script or HTML via crafted tag attributes.

Date published : 2016-02-15

https://github.com/rails/rails-html-sanitizer/commit/297161e29a3e11186ce4c02bf7defc088bf544d4

http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178046.html

Tags: