FlawAtlas
Search the atlas
SUSE-SU-2019:2182-1 Not scored

Security update for rubygem-rails-html-sanitizer

This update for rubygem-rails-html-sanitizer fixes the following issues: - CVE-2018-3741: Fixed a XSS vulnerability due to insufficient filtering in scrub_attribute (bsc#1086598).

Exploit probability Not scored
Published August 19, 2019
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Enterprise Storage 4 rubygem-rails-html-sanitizer
SUSE:OpenStack Cloud 7 rubygem-rails-html-sanitizer
SUSE:OpenStack Cloud Crowbar 8 rubygem-rails-html-sanitizer
SUSE:OpenStack Cloud Crowbar 9 rubygem-rails-html-sanitizer

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2019:2182-1

This update for rubygem-rails-html-sanitizer fixes the following issues: - CVE-2018-3741: Fixed a XSS vulnerability due to insufficient filtering in scrub_attribute (bsc#1086598).

View original source

05 / REFERENCES

Further evidence