Executive brief
Improper neutralization of data URIs may allow XSS in rails-html-sanitizer
Affected products
- RubyGems rails-html-sanitizer
Junglewise Threat Intelligence
CVE-2022-23518: Improper neutralization of data URIs may allow XSS in rails-html-sanitizer
CVE-2022-23518 · Severity: low · CVSS 3.1 · Published 2022-12-13
Technologies: rails-html-sanitizer (RubyGems). Vendors: RubyGems.
Related threats
- Rails HTML Sanitizers: Possible XSS vulnerability with certain configurations
- Rails HTML Sanitizers XSS in SVG reference elements
- rails-html-sanitizer has XSS vulnerability with certain configurations
- rails-html-sanitizer has XSS vulnerability with certain configurations
- rails-html-sanitizer has XSS vulnerability with certain configurations