SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Paid content will be excluded from the download.

Download | Alert*

OVAL

CVE-2018-16468 -- ruby-loofah

ID: oval:org.secpod.oval:def:1901445	Date: (C)2019-03-29 (M)2023-07-25
Class: VULNERABILITY	Family: unix

In the Loofah gem for Ruby, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.

Platform:

Ubuntu 18.10

Ubuntu 18.04

Product:

ruby-loofah

Reference:

CVE-2018-16468

CVE 1

CPE 3