CVE-2018-16468 PUBLISHED

In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.

EPSS 0.31% · 54.4th percentile

Risk Scores

EPSS Score
0.31%
54.4th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSruby-loofah0, 2.0.3-2, 2.2.2-1
Ubuntu:16.04:LTSruby-loofah2.0.3-2, 0, 2.0.3-2+deb9u1build0.16.04.1

Timeline

References

Open in Interactive Console →