CVE

CVE-2019-15587

CVE-2019-15587

In the Loofah gem for Ruby through v2.3.0 unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.

Source: CVE-2019-15587

Exit mobile version