Every CVE Search/ Get API key

CVE-2018-3741

rails-html-sanitizer Cross-site Scripting vulnerability

6.1 MediumFix available

There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
None

Exploit likelihood

1.25%Up 0.8 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 6.1

There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.

Record
CVE-2018-3741
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
CVE List No score

There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.

Record
CVE-2018-3741
Weakness
CWE-79
Updated
2026-11-02
EUVDEUVD-2018-0191 No score

There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.

Record
EUVD-2018-0191
Updated
2026-11-03
GitHub AdvisoriesGHSA-px3r-jm9g-c8w8 6.1

rails-html-sanitizer Cross-site Scripting vulnerability

There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.

Record
GHSA-px3r-jm9g-c8w8
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-79
Updated
2026-11-02
OSV 6.1

There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.

Record
CVE-2018-3741
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2018-3741 6.1

There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.

Record
DEBIAN-CVE-2018-3741
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
Show 10 moreShow less
OSVGHSA-px3r-jm9g-c8w8 6.1

rails-html-sanitizer Cross-site Scripting vulnerability

There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.

Record
GHSA-px3r-jm9g-c8w8
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-79
Updated
2026-11-02
OSVRHSA-2019:0212 6.1

Red Hat Security Advisory: CloudForms 4.7 security, bug fix and enhancement update

Record
RHSA-2019:0212
CVSS 3.0
6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2018-3741 6.1

There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.

Record
UBUNTU-CVE-2018-3741
CVSS 3.1
6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVopenSUSE-SU-2024:11349-1 No score

ruby2.7-rubygem-rails-html-sanitizer-1.4.2-1.2 on GA media

These are all security issues fixed in the ruby2.7-rubygem-rails-html-sanitizer-1.4.2-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11349-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12145-1 No score

ruby3.1-rubygem-rails-html-sanitizer-1.4.3-1.1 on GA media

These are all security issues fixed in the ruby3.1-rubygem-rails-html-sanitizer-1.4.3-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12145-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13137-1 No score

ruby3.2-rubygem-rails-html-sanitizer-1.5.0-2.1 on GA media

These are all security issues fixed in the ruby3.2-rubygem-rails-html-sanitizer-1.5.0-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13137-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14175-1 No score

ruby3.3-rubygem-rails-html-sanitizer-1.6.0-1.5 on GA media

These are all security issues fixed in the ruby3.3-rubygem-rails-html-sanitizer-1.6.0-1.5 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14175-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15125-1 No score

ruby3.4-rubygem-rails-html-sanitizer-1.6.0-1.7 on GA media

These are all security issues fixed in the ruby3.4-rubygem-rails-html-sanitizer-1.6.0-1.7 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15125-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:10361-1 No score

ruby4.0-rubygem-rails-html-sanitizer-1.6.0-1.9 on GA media

These are all security issues fixed in the ruby4.0-rubygem-rails-html-sanitizer-1.6.0-1.9 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10361-1
Updated
2026-11-02
OSVSUSE-SU-2019:2182-1 No score

Security update for rubygem-rails-html-sanitizer

This update for rubygem-rails-html-sanitizer fixes the following issues:

  • CVE-2018-3741: Fixed a XSS vulnerability due to insufficient filtering in scrub_attribute (bsc#1086598).
Record
SUSE-SU-2019:2182-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
rails-html-sanitizer
RubyGems
 before 1.0.4
1.0.4
ruby-rails-html-sanitizer
Debian:12
 before 1.0.4-1
1.0.4-1
ruby-rails-html-sanitizer
Debian:13
 before 1.0.4-1
1.0.4-1
ruby-rails-html-sanitizer
Debian:14
 before 1.0.4-1
1.0.4-1
rails-html-sanitizer
RubyGems
 before 1.0.4, plus listed versions
1.0.01.0.11.0.21.0.3
1.0.4
ansible-runner
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.2-2.el7ar
0:1.1.2-2.el7ar
ansible-tower
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.3.3-1.el7at
0:3.3.3-1.el7at
ansible-tower-server
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.3.3-1.el7at
0:3.3.3-1.el7at
ansible-tower-setup
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.3.3-1.el7at
0:3.3.3-1.el7at
ansible-tower-ui
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.3.3-1.el7at
0:3.3.3-1.el7at
Show 205 moreShow less
Affected packages
PackageAffectedFixed
ansible-tower-venv-ansible
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.3.3-1.el7at
0:3.3.3-1.el7at
ansible-tower-venv-tower
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.3.3-1.el7at
0:3.3.3-1.el7at
bubblewrap
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.1.7-1.el7
0:0.1.7-1.el7
bubblewrap-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.1.7-1.el7
0:0.1.7-1.el7
cfme
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.0.33-1.el7cf
0:5.10.0.33-1.el7cf
cfme-amazon-smartstate
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.0.33-1.el7cf
0:5.10.0.33-1.el7cf
cfme-appliance
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.0.33-1.el7cf
0:5.10.0.33-1.el7cf
cfme-appliance-common
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.0.33-1.el7cf
0:5.10.0.33-1.el7cf
cfme-appliance-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.0.33-1.el7cf
0:5.10.0.33-1.el7cf
cfme-appliance-tools
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.0.33-1.el7cf
0:5.10.0.33-1.el7cf
cfme-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.0.33-1.el7cf
0:5.10.0.33-1.el7cf
cfme-gemset
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.0.33-1.el7cf
0:5.10.0.33-1.el7cf
cfme-gemset-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.0.33-1.el7cf
0:5.10.0.33-1.el7cf
dbus-api-service
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.0.1-5.el7cf
0:1.0.1-5.el7cf
dumb-init
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.2.0-1.el7cf
0:1.2.0-1.el7cf
dumb-init-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.2.0-1.el7cf
0:1.2.0-1.el7cf
erlang
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-asn1
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-common_test
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-compiler
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-cosEvent
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-cosEventDomain
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-cosFileTransfer
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-cosNotification
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-cosProperty
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-cosTime
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-cosTransactions
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-crypto
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-debugger
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-dialyzer
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-diameter
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-doc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-edoc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-eldap
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-erl_docgen
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-erl_interface
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-erts
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-et
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-eunit
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-gs
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-hipe
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-ic
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-inets
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-jinterface
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-kernel
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-megaco
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-mnesia
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-observer
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-odbc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-orber
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-os_mon
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-otp_mibs
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-parsetools
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-percept
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-public_key
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-reltool
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-runtime_tools
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-sasl
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-snmp
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-ssh
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-ssl
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-stdlib
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-syntax_tools
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-tools
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-typer
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-wx
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-xmerl
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
google-compute-engine
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.0.0-2.el7cf
0:2.0.0-2.el7cf
google-config
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.0.0-2.el7cf
0:2.0.0-2.el7cf
httpd-configmap-generator
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.2.2-2.el7cf
0:0.2.2-2.el7cf
nginx
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:1.10.2-1.el7at
1:1.10.2-1.el7at
nginx-all-modules
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:1.10.2-1.el7at
1:1.10.2-1.el7at
nginx-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:1.10.2-1.el7at
1:1.10.2-1.el7at
nginx-filesystem
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:1.10.2-1.el7at
1:1.10.2-1.el7at
nginx-mod-http-geoip
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:1.10.2-1.el7at
1:1.10.2-1.el7at
nginx-mod-http-image-filter
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:1.10.2-1.el7at
1:1.10.2-1.el7at
nginx-mod-http-perl
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:1.10.2-1.el7at
1:1.10.2-1.el7at
nginx-mod-http-xslt-filter
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:1.10.2-1.el7at
1:1.10.2-1.el7at
nginx-mod-mail
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:1.10.2-1.el7at
1:1.10.2-1.el7at
nginx-mod-stream
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:1.10.2-1.el7at
1:1.10.2-1.el7at
ovirt-ansible-cluster-upgrade
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.8-1.el7ev
0:1.1.8-1.el7ev
ovirt-ansible-disaster-recovery
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.2-1.el7ev
0:1.1.2-1.el7ev
ovirt-ansible-engine-setup
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.5-1.el7ev
0:1.1.5-1.el7ev
ovirt-ansible-image-template
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.8-1.el7ev
0:1.1.8-1.el7ev
ovirt-ansible-infra
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.8-1.el7ev
0:1.1.8-1.el7ev
ovirt-ansible-manageiq
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.12-1.el7ev
0:1.1.12-1.el7ev
ovirt-ansible-repositories
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.2-1.el7ev
0:1.1.2-1.el7ev
ovirt-ansible-roles
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.5-1.el7ev
0:1.1.5-1.el7ev
ovirt-ansible-shutdown-env
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.0.0-1.el7ev
0:1.0.0-1.el7ev
ovirt-ansible-v2v-conversion-host
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.6.3-1.el7ev
0:1.6.3-1.el7ev
ovirt-ansible-vm-infra
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.10-1.el7ev
0:1.1.10-1.el7ev
postgresql96
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-contrib
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-devel
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-docs
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-libs
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-plperl
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-plpython
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-pltcl
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-server
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-test
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
prince
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.0r2-10.el7cf
0:9.0r2-10.el7cf
pyOpenSSL
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:17.3.0-4.el7ost
0:17.3.0-4.el7ost
pyOpenSSL-doc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:17.3.0-4.el7ost
0:17.3.0-4.el7ost
python-bambou
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.0.1-2.el7cf
0:3.0.1-2.el7cf
python-colorama
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.3.7-2.el7ost
0:0.3.7-2.el7ost
python-crypto
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.6.1-16.el7at
0:2.6.1-16.el7at
python-crypto-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.6.1-16.el7at
0:2.6.1-16.el7at
python-daemon
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.1.2-7.el7at
0:2.1.2-7.el7at
python-funcsigs
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.0.2-1.el7ost
0:1.0.2-1.el7ost
python-funcsigs-doc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.0.2-1.el7ost
0:1.0.2-1.el7ost
python-future
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.16.0-1.el7cf
0:0.16.0-1.el7cf
python-lockfile
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:0.11.0-10.el7at
1:0.11.0-10.el7at
python-meld3
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.6.10-1.el7
0:0.6.10-1.el7
python-meld3-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.6.10-1.el7
0:0.6.10-1.el7
python-mock
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.0.0-1.el7ost
0:2.0.0-1.el7ost
python-pbr
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.1.1-2.el7ost
0:3.1.1-2.el7ost
python-pexpect
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:4.6-1.el7at
0:4.6-1.el7at
python-psutil
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.4.3-2.el7at
0:5.4.3-2.el7at
python-psutil-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.4.3-2.el7at
0:5.4.3-2.el7at
python-ptyprocess
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.5.2-3.el7at
0:0.5.2-3.el7at
python-pylxca
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.1.1-2.el7cf
0:2.1.1-2.el7cf
python-pysocks
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.5.6-3.el7ost
0:1.5.6-3.el7ost
python-qpid-proton
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.19.0-1.el7cf
0:0.19.0-1.el7cf
python-qpid-proton-docs
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.19.0-1.el7cf
0:0.19.0-1.el7cf
python-requests
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.14.2-1.el7ost
0:2.14.2-1.el7ost
python-requests-toolbelt
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.8.0-2.el7cf
0:0.8.0-2.el7cf
python-tabulate
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.8.2-1.el7cf
0:0.8.2-1.el7cf
python-urllib3
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.21.1-1.2.el7ost
0:1.21.1-1.2.el7ost
python-vspk
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.3.2-2.el7cf
0:5.3.2-2.el7cf
python2-bambou
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.0.1-2.el7cf
0:3.0.1-2.el7cf
python2-crypto
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.6.1-16.el7at
0:2.6.1-16.el7at
python2-daemon
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.1.2-7.el7at
0:2.1.2-7.el7at
python2-future
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.16.0-1.el7cf
0:0.16.0-1.el7cf
python2-lockfile
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:0.11.0-10.el7at
1:0.11.0-10.el7at
python2-pbr
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.1.1-2.el7ost
0:3.1.1-2.el7ost
python2-pexpect
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:4.6-1.el7at
0:4.6-1.el7at
python2-psutil
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.4.3-2.el7at
0:5.4.3-2.el7at
python2-ptyprocess
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.5.2-3.el7at
0:0.5.2-3.el7at
python2-pyOpenSSL
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:17.3.0-4.el7ost
0:17.3.0-4.el7ost
python2-pylxca
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.1.1-2.el7cf
0:2.1.1-2.el7cf
python2-requests
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.14.2-1.el7ost
0:2.14.2-1.el7ost
python2-requests-toolbelt
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.8.0-2.el7cf
0:0.8.0-2.el7cf
python2-tabulate
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.8.2-1.el7cf
0:0.8.2-1.el7cf
python2-urllib3
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.21.1-1.2.el7ost
0:1.21.1-1.2.el7ost
python2-vspk
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.3.2-2.el7cf
0:5.3.2-2.el7cf
qpid-proton
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.19.0-1.el7cf
0:0.19.0-1.el7cf
qpid-proton-c
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.19.0-1.el7cf
0:0.19.0-1.el7cf
qpid-proton-c-devel
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.19.0-1.el7cf
0:0.19.0-1.el7cf
qpid-proton-c-docs
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.19.0-1.el7cf
0:0.19.0-1.el7cf
qpid-proton-cpp
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.19.0-1.el7cf
0:0.19.0-1.el7cf
qpid-proton-cpp-devel
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.19.0-1.el7cf
0:0.19.0-1.el7cf
qpid-proton-cpp-docs
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.19.0-1.el7cf
0:0.19.0-1.el7cf
qpid-proton-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.19.0-1.el7cf
0:0.19.0-1.el7cf
rabbitmq-server
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.7.4-1.el7at
0:3.7.4-1.el7at
rh-postgresql95-postgresql-pglogical
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.1.0-4.el7cf
0:2.1.0-4.el7cf
rh-postgresql95-postgresql-pglogical-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.1.0-4.el7cf
0:2.1.0-4.el7cf
rh-postgresql95-repmgr
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:4.0.6-2.el7cf
0:4.0.6-2.el7cf
rh-postgresql95-repmgr-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:4.0.6-2.el7cf
0:4.0.6-2.el7cf
ruby
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.4.5-90.el7cf
0:2.4.5-90.el7cf
ruby-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.4.5-90.el7cf
0:2.4.5-90.el7cf
ruby-devel
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.4.5-90.el7cf
0:2.4.5-90.el7cf
ruby-doc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.4.5-90.el7cf
0:2.4.5-90.el7cf
ruby-irb
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.4.5-90.el7cf
0:2.4.5-90.el7cf
ruby-libs
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.4.5-90.el7cf
0:2.4.5-90.el7cf
rubygem-bcrypt
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.1.12-1.el7cf
0:3.1.12-1.el7cf
rubygem-bcrypt-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.1.12-1.el7cf
0:3.1.12-1.el7cf
rubygem-bcrypt-doc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.1.12-1.el7cf
0:3.1.12-1.el7cf
rubygem-bigdecimal
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.3.2-90.el7cf
0:1.3.2-90.el7cf
rubygem-did_you_mean
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.0-90.el7cf
0:1.1.0-90.el7cf
rubygem-ffi
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.9.25-1.el7cf
0:1.9.25-1.el7cf
rubygem-ffi-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.9.25-1.el7cf
0:1.9.25-1.el7cf
rubygem-ffi-doc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.9.25-1.el7cf
0:1.9.25-1.el7cf
rubygem-hamlit
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.8.8-1.el7cf
0:2.8.8-1.el7cf
rubygem-hamlit-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.8.8-1.el7cf
0:2.8.8-1.el7cf
rubygem-hamlit-doc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.8.8-1.el7cf
0:2.8.8-1.el7cf
rubygem-http_parser.rb
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.6.0-1.el7cf
0:0.6.0-1.el7cf
rubygem-http_parser.rb-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.6.0-1.el7cf
0:0.6.0-1.el7cf
rubygem-http_parser.rb-doc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.6.0-1.el7cf
0:0.6.0-1.el7cf
rubygem-io-console
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.4.6-90.el7cf
0:0.4.6-90.el7cf
rubygem-json
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.1.0-1.el7cf
0:2.1.0-1.el7cf
rubygem-json-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.1.0-1.el7cf
0:2.1.0-1.el7cf
rubygem-json-doc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.1.0-1.el7cf
0:2.1.0-1.el7cf
rubygem-linux_block_device
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.2.1-1.el7cf
0:0.2.1-1.el7cf
rubygem-linux_block_device-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.2.1-1.el7cf
0:0.2.1-1.el7cf
rubygem-linux_block_device-doc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.2.1-1.el7cf
0:0.2.1-1.el7cf
rubygem-memory_buffer
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.1.0-2.el7cf
0:0.1.0-2.el7cf
rubygem-memory_buffer-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.1.0-2.el7cf
0:0.1.0-2.el7cf
rubygem-memory_buffer-doc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.1.0-2.el7cf
0:0.1.0-2.el7cf
rubygem-minitest
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.1-90.el7cf
0:5.10.1-90.el7cf
rubygem-net-telnet
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.1.1-90.el7cf
0:0.1.1-90.el7cf
rubygem-nio4r
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.3.1-1.el7cf
0:2.3.1-1.el7cf
rubygem-nio4r-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.3.1-1.el7cf
0:2.3.1-1.el7cf
rubygem-rails-html-sanitizer
SUSE:OpenStack Cloud 7
 before 1.0.3-8.8.1
1.0.3-8.8.1
rubygem-rails-html-sanitizer
SUSE:OpenStack Cloud Crowbar 8
 before 1.0.3-8.8.1
1.0.3-8.8.1
rubygem-rails-html-sanitizer
SUSE:OpenStack Cloud Crowbar 9
 before 1.0.3-8.8.1
1.0.3-8.8.1
rubygem-rails-html-sanitizer
SUSE:Enterprise Storage 4
 before 1.0.3-8.8.1
1.0.3-8.8.1
ruby-rails-html-sanitizer
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.0.2-11.0.3-11.0.3-2
 None known
rubygem-rails-html-sanitizer
openSUSE:Tumbleweed
 before 1.4.3-1.1
1.4.3-1.1
ruby3.2-rubygem-rails-html-sanitizer
openSUSE:Tumbleweed
 before 1.5.0-2.1
1.5.0-2.1
rubygem-rails-html-sanitizer
openSUSE:Tumbleweed
 before 1.6.0-1.5
1.6.0-1.5
rubygem-rails-html-sanitizer
openSUSE:Tumbleweed
 before 1.6.0-1.7
1.6.0-1.7
rubygem-rails-html-sanitizer
openSUSE:Tumbleweed
 before 1.6.0-1.9
1.6.0-1.9

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-3741 is a medium vulnerability (CVSS 6.1) in Rails Rails-html-sanitizer, published March 30, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.25%, the 69th percentile. Fixed in rails-html-sanitizer 1.0.4.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 266 references. The JSON record has them. Also not on the record: 52 package claims. ID and package lookups still check them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open