CVE-2018-16468CWE-79

CVE-2018-16468: vulnerability in Loofah (Ruby Gem)

Published · Updated

Follow this CVE+ Monitor Loofah+ Monitor ruby-loofah

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.9%
In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.
Affected products
n/a · Loofah (Ruby Gem)