Junglewise Threat Intelligence

CVE-2020-4054: Cross-site Scripting in Sanitize

CVE-2020-4054 · Severity: low · CVSS 3.1 · Published 2020-06-16

Technologies: sanitize (RubyGems). Vendors: RubyGems.

Executive brief

Cross-site Scripting in Sanitize

Affected products

RubyGems sanitize

Related threats

Sanitize vulnerable to Cross-site Scripting via insufficient neutralization of `style` element content
Improper neutralization of `noscript` element content may allow XSS in Sanitize
Sanitize vulnerable to Improper Input Validation and Cross-site Scripting