GitHub Advisoryadvisory · RubyGems

GHSA-q759-hwvc-m3jg actionpack Cross-site Scripting vulnerability

MEDIUM Published 2017-10-24 Modified 2023-08-25 Official page ↗
Aliases
CVE-2013-1855
Ecosystem
RubyGems
Packages
actionpack
Severity
Moderate
Weaknesses
CWE-79
Reviewed
2020-06-16

Affected packages

• RubyGems actionpack: < 2.3.18 → fixed in 2.3.18 • RubyGems actionpack: >= 3.0.0, < 3.1.12 → fixed in 3.1.12 • RubyGems actionpack: >= 3.2.0, < 3.2.13 → fixed in 3.2.13

Description

The `sanitize_css` method in `lib/action_controller/vendor/html-scanner/html/sanitizer.rb` in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle `\n` (newline) characters, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS) token sequences.

Related

Alias · CVE (1)

  • CVE-2013-1855 The sanitize_css method in lib/action_controller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References