PT-2024-35997 · Rails+3 · Rails+3

Mokusou + 2 · Published 2024-12-02 · Updated 2026-04-17 · CVE-2024-53985

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: rails-html-sanitizer version 1.6.0

Description: The issue is related to a possible XSS vulnerability with certain configurations of Rails::HTML::Sanitizer when used with Rails >= 7.1.0 and Nokogiri < 1.15.7, or 1.16.x < 1.16.8. This vulnerability may allow an attacker to inject content if HTML5 sanitization is enabled and the application developer has overridden the sanitizer's allowed tags with both "math" and "style" elements or both "svg" and "style" elements.

Recommendations: For rails-html-sanitizer version 1.6.0, upgrade to version 1.6.1 to fix the vulnerability. As a temporary workaround, consider removing "style" from the overridden allowed tags, or remove "math" and "svg" from the overridden allowed tags, or downgrade sanitization to HTML4. Alternatively, independently upgrade Nokogiri to v1.15.7 or >= 1.16.8.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2025-04579

CVE-2024-53985

GHSA-W8GC-X259-RC7X

OPENSUSE-SU-2026:10569-1

Affected Products

Nokogiri

Rails

Red Os

Rails-Html-Sanitizer

References · 28

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53985.json · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rails-html-sanitizer/CVE-2024-53985.yml · Exploit
• https://github.com/rails/rails-html-sanitizer/commit/cd18b0ef00aad1d4a9e1c5d860cd23f80f63c505 · Patch
• https://github.com/rails/rails-html-sanitizer/commit/b0220b8850d52199a15f83c472d175a4122dd7b1 · Patch
• https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-w8gc-x259-rc7x · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-53985 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10569-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-w8gc-x259-rc7x · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-53985 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-53985 · Security Note
• https://bdu.fstec.ru/vul/2025-04579 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-53985 · Security Note
• https://ubuntu.com/security/CVE-2024-53985 · Vendor Advisory
• https://github.com/rails/rails-html-sanitizer · Note
• https://suse.com/security/cve/CVE-2024-53988 · Note