PT-2015-7903 · Ruby · Ruby-Redcarpet

Publicado 2015-05-11 · Atualizado 2015-05-11

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions ruby-redcarpet (affected versions not specified)

Description The issue allows for possible XSS of untrusted markdown if the autolink extension is enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2015-0206

Produtos afetados

Ruby-Redcarpet

Referências · 4

• http://openwall.com/lists/oss-security/2015/04/07/11 · Nota
• https://osv.dev/vulnerability/MGASA-2015-0206 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2015-0206.html · Nota de Segurança
• https://bugs.mageia.org/show_bug.cgi?id=15652 · Nota