Security Advisory

CVE-2018-8048

6.1
MEDIUM

Vulnerability Description

In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.
Published Date March 27, 2018
Official Source NIST NVD Advisory