Every CVE Search/ Get API key

CVE-2018-8048

Cross-site Scripting in loofah

6.1 MediumFix available

In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
None

Exploit likelihood

1.93%Up 0.9 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 6.1

In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.

Record
CVE-2018-8048
CVSS 3.0
6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-79
Updated
2026-11-02
CVE List No score

In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.

Record
CVE-2018-8048
Updated
2026-11-02
EUVDEUVD-2018-0188 No score

In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.

Record
EUVD-2018-0188
Updated
2026-11-03
GitHub AdvisoriesGHSA-x7rv-cr6v-4vm4 6.1

Cross-site Scripting in loofah

Loofah allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments.

Users are affected if running Loofah < 2.2.1, but only:

  • when running on MRI or RBX,
  • in combination with libxml2 >= 2.9.2.

JRuby users are not affected.

Record
GHSA-x7rv-cr6v-4vm4
CVSS 3.0
6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-79
Updated
2026-11-02
OSV 6.1

In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.

Record
CVE-2018-8048
CVSS 3.0
6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2018-8048 6.1

In the Loofah gem through 2.2.0 for Ruby, non-whitelisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment.

Record
DEBIAN-CVE-2018-8048
CVSS 3.0
6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
Show 17 moreShow less
OSVGHSA-x7rv-cr6v-4vm4 6.1

Cross-site Scripting in loofah

Loofah allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments.

Users are affected if running Loofah < 2.2.1, but only:

  • when running on MRI or RBX,
  • in combination with libxml2 >= 2.9.2.

JRuby users are not affected.

Record
GHSA-x7rv-cr6v-4vm4
CVSS 3.0
6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-79
Updated
2026-11-02
OSVRHSA-2019:0212 6.1

Red Hat Security Advisory: CloudForms 4.7 security, bug fix and enhancement update

Record
RHSA-2019:0212
CVSS 3.0
6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVopenSUSE-SU-2024:11337-1 No score

ruby2.7-rubygem-loofah-2.12.0-1.2 on GA media

These are all security issues fixed in the ruby2.7-rubygem-loofah-2.12.0-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11337-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11340-1 No score

ruby2.7-rubygem-nokogiri-1.12.3-1.2 on GA media

These are all security issues fixed in the ruby2.7-rubygem-nokogiri-1.12.3-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11340-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11900-1 No score

ruby3.1-rubygem-loofah-2.14.0-1.1 on GA media

These are all security issues fixed in the ruby3.1-rubygem-loofah-2.14.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11900-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11912-1 No score

ruby3.1-rubygem-nokogiri-1.13.3-1.1 on GA media

These are all security issues fixed in the ruby3.1-rubygem-nokogiri-1.13.3-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11912-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13162-1 No score

ruby3.2-rubygem-loofah-2.19.1-1.2 on GA media

These are all security issues fixed in the ruby3.2-rubygem-loofah-2.19.1-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13162-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13165-1 No score

ruby3.2-rubygem-nokogiri-1.13.9-1.7 on GA media

These are all security issues fixed in the ruby3.2-rubygem-nokogiri-1.13.9-1.7 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13165-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14171-1 No score

ruby3.3-rubygem-loofah-2.22.0-1.5 on GA media

These are all security issues fixed in the ruby3.3-rubygem-loofah-2.22.0-1.5 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14171-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14174-1 No score

ruby3.3-rubygem-nokogiri-1.15.5-1.5 on GA media

These are all security issues fixed in the ruby3.3-rubygem-nokogiri-1.15.5-1.5 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14174-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:14697-1 No score

ruby3.4-rubygem-nokogiri-1.18.2-1.1 on GA media

These are all security issues fixed in the ruby3.4-rubygem-nokogiri-1.18.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:14697-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15120-1 No score

ruby3.4-rubygem-loofah-2.23.1-1.3 on GA media

These are all security issues fixed in the ruby3.4-rubygem-loofah-2.23.1-1.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15120-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:10353-1 No score

ruby4.0-rubygem-loofah-2.23.1-1.5 on GA media

These are all security issues fixed in the ruby4.0-rubygem-loofah-2.23.1-1.5 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10353-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:10356-1 No score

ruby4.0-rubygem-nokogiri-1.18.9-1.4 on GA media

These are all security issues fixed in the ruby4.0-rubygem-nokogiri-1.18.9-1.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10356-1
Updated
2026-11-02
OSVSUSE-SU-2019:0394-1 No score

Security update for rubygem-loofah

This update for rubygem-loofah fixes the following issues:

Security issues fixed:

  • CVE-2018-16468: Fixed XXS by removing the svg animate attribute from from the allowlist (bsc#1113969).
  • CVE-2018-8048: Fixed XSS vulnerability due to unescaped characters by libcxml2 (bsc#1085967).
Record
SUSE-SU-2019:0394-1
Updated
2026-11-02
OSVSUSE-SU-2019:2209-1 No score

Security update for rubygem-loofah

This update for rubygem-loofah fixes the following issues:

  • Security issue fixed:

  • CVE-2018-8048: Update fix to make Loofah::HTML5::Scrub.force_correct_attribute_escaping! callable from other gems (bsc#1086598).

Record
SUSE-SU-2019:2209-1
Updated
2026-11-02
OSVSUSE-SU-2022:4075-1 No score

Security update for rubygem-loofah

This update for rubygem-loofah fixes the following issues:

  • CVE-2019-15587: Fixed issue in sanitization of crafted SVG elements (bsc#1154751).
Record
SUSE-SU-2022:4075-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
loofah
RubyGems
 before 2.2.1
2.2.1
nokogiri
RubyGems
 before 1.8.3
1.8.3
ruby-loofah
Debian:12
 before 2.2.1-1
2.2.1-1
ruby-loofah
Debian:13
 before 2.2.1-1
2.2.1-1
ruby-loofah
Debian:14
 before 2.2.1-1
2.2.1-1
ruby-loofah
Debian:9
 before 2.0.3-2+deb9u1, plus listed versions
2.0.3-2
2.0.3-2+deb9u1
loofah
RubyGems
 before 2.2.1, plus listed versions
0.2.00.2.10.2.20.3.00.3.1
Show 22 moreShow less
0.4.00.4.10.4.20.4.30.4.40.4.50.4.60.4.71.0.01.0.0.beta.11.1.01.2.01.2.12.0.02.0.12.0.22.0.32.1.02.1.0.rc12.1.0.rc22.1.12.2.0
2.2.1
nokogiri
RubyGems
 before 1.8.3, plus listed versions
1.0.01.0.11.0.21.0.31.0.4
Show 45 moreShow less
1.0.51.0.61.0.71.1.01.1.11.2.01.2.11.2.21.2.31.3.01.3.11.3.21.3.31.4.01.4.11.4.21.4.2.11.4.31.4.3.11.4.41.4.4.11.4.4.21.4.51.4.61.4.71.5.01.5.0.beta.11.5.0.beta.21.5.0.beta.31.5.0.beta.41.5.11.5.1.rc11.5.101.5.111.5.21.5.31.5.3.rc21.5.3.rc31.5.3.rc41.5.3.rc51.5.3.rc61.5.41.5.4.rc11.5.4.rc21.5.4.rc3
1.8.3
ansible-runner
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.2-2.el7ar
0:1.1.2-2.el7ar
ansible-tower
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.3.3-1.el7at
0:3.3.3-1.el7at
Show 217 moreShow less
Affected packages
PackageAffectedFixed
ansible-tower-server
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.3.3-1.el7at
0:3.3.3-1.el7at
ansible-tower-setup
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.3.3-1.el7at
0:3.3.3-1.el7at
ansible-tower-ui
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.3.3-1.el7at
0:3.3.3-1.el7at
ansible-tower-venv-ansible
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.3.3-1.el7at
0:3.3.3-1.el7at
ansible-tower-venv-tower
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.3.3-1.el7at
0:3.3.3-1.el7at
bubblewrap
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.1.7-1.el7
0:0.1.7-1.el7
bubblewrap-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.1.7-1.el7
0:0.1.7-1.el7
cfme
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.0.33-1.el7cf
0:5.10.0.33-1.el7cf
cfme-amazon-smartstate
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.0.33-1.el7cf
0:5.10.0.33-1.el7cf
cfme-appliance
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.0.33-1.el7cf
0:5.10.0.33-1.el7cf
cfme-appliance-common
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.0.33-1.el7cf
0:5.10.0.33-1.el7cf
cfme-appliance-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.0.33-1.el7cf
0:5.10.0.33-1.el7cf
cfme-appliance-tools
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.0.33-1.el7cf
0:5.10.0.33-1.el7cf
cfme-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.0.33-1.el7cf
0:5.10.0.33-1.el7cf
cfme-gemset
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.0.33-1.el7cf
0:5.10.0.33-1.el7cf
cfme-gemset-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.0.33-1.el7cf
0:5.10.0.33-1.el7cf
dbus-api-service
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.0.1-5.el7cf
0:1.0.1-5.el7cf
dumb-init
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.2.0-1.el7cf
0:1.2.0-1.el7cf
dumb-init-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.2.0-1.el7cf
0:1.2.0-1.el7cf
erlang
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-asn1
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-common_test
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-compiler
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-cosEvent
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-cosEventDomain
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-cosFileTransfer
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-cosNotification
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-cosProperty
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-cosTime
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-cosTransactions
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-crypto
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-debugger
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-dialyzer
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-diameter
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-doc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-edoc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-eldap
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-erl_docgen
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-erl_interface
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-erts
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-et
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-eunit
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-gs
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-hipe
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-ic
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-inets
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-jinterface
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-kernel
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-megaco
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-mnesia
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-observer
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-odbc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-orber
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-os_mon
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-otp_mibs
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-parsetools
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-percept
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-public_key
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-reltool
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-runtime_tools
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-sasl
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-snmp
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-ssh
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-ssl
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-stdlib
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-syntax_tools
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-tools
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-typer
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-wx
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
erlang-xmerl
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:19.3.6.7-1.el7at
0:19.3.6.7-1.el7at
google-compute-engine
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.0.0-2.el7cf
0:2.0.0-2.el7cf
google-config
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.0.0-2.el7cf
0:2.0.0-2.el7cf
httpd-configmap-generator
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.2.2-2.el7cf
0:0.2.2-2.el7cf
nginx
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:1.10.2-1.el7at
1:1.10.2-1.el7at
nginx-all-modules
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:1.10.2-1.el7at
1:1.10.2-1.el7at
nginx-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:1.10.2-1.el7at
1:1.10.2-1.el7at
nginx-filesystem
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:1.10.2-1.el7at
1:1.10.2-1.el7at
nginx-mod-http-geoip
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:1.10.2-1.el7at
1:1.10.2-1.el7at
nginx-mod-http-image-filter
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:1.10.2-1.el7at
1:1.10.2-1.el7at
nginx-mod-http-perl
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:1.10.2-1.el7at
1:1.10.2-1.el7at
nginx-mod-http-xslt-filter
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:1.10.2-1.el7at
1:1.10.2-1.el7at
nginx-mod-mail
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:1.10.2-1.el7at
1:1.10.2-1.el7at
nginx-mod-stream
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:1.10.2-1.el7at
1:1.10.2-1.el7at
ovirt-ansible-cluster-upgrade
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.8-1.el7ev
0:1.1.8-1.el7ev
ovirt-ansible-disaster-recovery
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.2-1.el7ev
0:1.1.2-1.el7ev
ovirt-ansible-engine-setup
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.5-1.el7ev
0:1.1.5-1.el7ev
ovirt-ansible-image-template
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.8-1.el7ev
0:1.1.8-1.el7ev
ovirt-ansible-infra
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.8-1.el7ev
0:1.1.8-1.el7ev
ovirt-ansible-manageiq
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.12-1.el7ev
0:1.1.12-1.el7ev
ovirt-ansible-repositories
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.2-1.el7ev
0:1.1.2-1.el7ev
ovirt-ansible-roles
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.5-1.el7ev
0:1.1.5-1.el7ev
ovirt-ansible-shutdown-env
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.0.0-1.el7ev
0:1.0.0-1.el7ev
ovirt-ansible-v2v-conversion-host
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.6.3-1.el7ev
0:1.6.3-1.el7ev
ovirt-ansible-vm-infra
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.10-1.el7ev
0:1.1.10-1.el7ev
postgresql96
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-contrib
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-devel
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-docs
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-libs
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-plperl
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-plpython
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-pltcl
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-server
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
postgresql96-test
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.6.10-1PGDG.el7at
0:9.6.10-1PGDG.el7at
prince
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:9.0r2-10.el7cf
0:9.0r2-10.el7cf
pyOpenSSL
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:17.3.0-4.el7ost
0:17.3.0-4.el7ost
pyOpenSSL-doc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:17.3.0-4.el7ost
0:17.3.0-4.el7ost
python-bambou
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.0.1-2.el7cf
0:3.0.1-2.el7cf
python-colorama
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.3.7-2.el7ost
0:0.3.7-2.el7ost
python-crypto
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.6.1-16.el7at
0:2.6.1-16.el7at
python-crypto-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.6.1-16.el7at
0:2.6.1-16.el7at
python-daemon
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.1.2-7.el7at
0:2.1.2-7.el7at
python-funcsigs
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.0.2-1.el7ost
0:1.0.2-1.el7ost
python-funcsigs-doc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.0.2-1.el7ost
0:1.0.2-1.el7ost
python-future
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.16.0-1.el7cf
0:0.16.0-1.el7cf
python-lockfile
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:0.11.0-10.el7at
1:0.11.0-10.el7at
python-meld3
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.6.10-1.el7
0:0.6.10-1.el7
python-meld3-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.6.10-1.el7
0:0.6.10-1.el7
python-mock
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.0.0-1.el7ost
0:2.0.0-1.el7ost
python-pbr
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.1.1-2.el7ost
0:3.1.1-2.el7ost
python-pexpect
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:4.6-1.el7at
0:4.6-1.el7at
python-psutil
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.4.3-2.el7at
0:5.4.3-2.el7at
python-psutil-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.4.3-2.el7at
0:5.4.3-2.el7at
python-ptyprocess
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.5.2-3.el7at
0:0.5.2-3.el7at
python-pylxca
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.1.1-2.el7cf
0:2.1.1-2.el7cf
python-pysocks
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.5.6-3.el7ost
0:1.5.6-3.el7ost
python-qpid-proton
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.19.0-1.el7cf
0:0.19.0-1.el7cf
python-qpid-proton-docs
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.19.0-1.el7cf
0:0.19.0-1.el7cf
python-requests
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.14.2-1.el7ost
0:2.14.2-1.el7ost
python-requests-toolbelt
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.8.0-2.el7cf
0:0.8.0-2.el7cf
python-tabulate
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.8.2-1.el7cf
0:0.8.2-1.el7cf
python-urllib3
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.21.1-1.2.el7ost
0:1.21.1-1.2.el7ost
python-vspk
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.3.2-2.el7cf
0:5.3.2-2.el7cf
python2-bambou
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.0.1-2.el7cf
0:3.0.1-2.el7cf
python2-crypto
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.6.1-16.el7at
0:2.6.1-16.el7at
python2-daemon
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.1.2-7.el7at
0:2.1.2-7.el7at
python2-future
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.16.0-1.el7cf
0:0.16.0-1.el7cf
python2-lockfile
Red Hat:cloudforms_managementengine:5.10::el7
 before 1:0.11.0-10.el7at
1:0.11.0-10.el7at
python2-pbr
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.1.1-2.el7ost
0:3.1.1-2.el7ost
python2-pexpect
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:4.6-1.el7at
0:4.6-1.el7at
python2-psutil
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.4.3-2.el7at
0:5.4.3-2.el7at
python2-ptyprocess
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.5.2-3.el7at
0:0.5.2-3.el7at
python2-pyOpenSSL
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:17.3.0-4.el7ost
0:17.3.0-4.el7ost
python2-pylxca
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.1.1-2.el7cf
0:2.1.1-2.el7cf
python2-requests
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.14.2-1.el7ost
0:2.14.2-1.el7ost
python2-requests-toolbelt
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.8.0-2.el7cf
0:0.8.0-2.el7cf
python2-tabulate
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.8.2-1.el7cf
0:0.8.2-1.el7cf
python2-urllib3
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.21.1-1.2.el7ost
0:1.21.1-1.2.el7ost
python2-vspk
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.3.2-2.el7cf
0:5.3.2-2.el7cf
qpid-proton
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.19.0-1.el7cf
0:0.19.0-1.el7cf
qpid-proton-c
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.19.0-1.el7cf
0:0.19.0-1.el7cf
qpid-proton-c-devel
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.19.0-1.el7cf
0:0.19.0-1.el7cf
qpid-proton-c-docs
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.19.0-1.el7cf
0:0.19.0-1.el7cf
qpid-proton-cpp
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.19.0-1.el7cf
0:0.19.0-1.el7cf
qpid-proton-cpp-devel
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.19.0-1.el7cf
0:0.19.0-1.el7cf
qpid-proton-cpp-docs
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.19.0-1.el7cf
0:0.19.0-1.el7cf
qpid-proton-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.19.0-1.el7cf
0:0.19.0-1.el7cf
rabbitmq-server
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.7.4-1.el7at
0:3.7.4-1.el7at
rh-postgresql95-postgresql-pglogical
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.1.0-4.el7cf
0:2.1.0-4.el7cf
rh-postgresql95-postgresql-pglogical-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.1.0-4.el7cf
0:2.1.0-4.el7cf
rh-postgresql95-repmgr
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:4.0.6-2.el7cf
0:4.0.6-2.el7cf
rh-postgresql95-repmgr-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:4.0.6-2.el7cf
0:4.0.6-2.el7cf
ruby
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.4.5-90.el7cf
0:2.4.5-90.el7cf
ruby-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.4.5-90.el7cf
0:2.4.5-90.el7cf
ruby-devel
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.4.5-90.el7cf
0:2.4.5-90.el7cf
ruby-doc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.4.5-90.el7cf
0:2.4.5-90.el7cf
ruby-irb
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.4.5-90.el7cf
0:2.4.5-90.el7cf
ruby-libs
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.4.5-90.el7cf
0:2.4.5-90.el7cf
rubygem-bcrypt
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.1.12-1.el7cf
0:3.1.12-1.el7cf
rubygem-bcrypt-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.1.12-1.el7cf
0:3.1.12-1.el7cf
rubygem-bcrypt-doc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:3.1.12-1.el7cf
0:3.1.12-1.el7cf
rubygem-bigdecimal
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.3.2-90.el7cf
0:1.3.2-90.el7cf
rubygem-did_you_mean
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.1.0-90.el7cf
0:1.1.0-90.el7cf
rubygem-ffi
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.9.25-1.el7cf
0:1.9.25-1.el7cf
rubygem-ffi-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.9.25-1.el7cf
0:1.9.25-1.el7cf
rubygem-ffi-doc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:1.9.25-1.el7cf
0:1.9.25-1.el7cf
rubygem-hamlit
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.8.8-1.el7cf
0:2.8.8-1.el7cf
rubygem-hamlit-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.8.8-1.el7cf
0:2.8.8-1.el7cf
rubygem-hamlit-doc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.8.8-1.el7cf
0:2.8.8-1.el7cf
rubygem-http_parser.rb
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.6.0-1.el7cf
0:0.6.0-1.el7cf
rubygem-http_parser.rb-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.6.0-1.el7cf
0:0.6.0-1.el7cf
rubygem-http_parser.rb-doc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.6.0-1.el7cf
0:0.6.0-1.el7cf
rubygem-io-console
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.4.6-90.el7cf
0:0.4.6-90.el7cf
rubygem-json
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.1.0-1.el7cf
0:2.1.0-1.el7cf
rubygem-json-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.1.0-1.el7cf
0:2.1.0-1.el7cf
rubygem-json-doc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.1.0-1.el7cf
0:2.1.0-1.el7cf
rubygem-linux_block_device
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.2.1-1.el7cf
0:0.2.1-1.el7cf
rubygem-linux_block_device-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.2.1-1.el7cf
0:0.2.1-1.el7cf
rubygem-linux_block_device-doc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.2.1-1.el7cf
0:0.2.1-1.el7cf
rubygem-memory_buffer
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.1.0-2.el7cf
0:0.1.0-2.el7cf
rubygem-memory_buffer-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.1.0-2.el7cf
0:0.1.0-2.el7cf
rubygem-memory_buffer-doc
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.1.0-2.el7cf
0:0.1.0-2.el7cf
rubygem-minitest
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:5.10.1-90.el7cf
0:5.10.1-90.el7cf
rubygem-net-telnet
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:0.1.1-90.el7cf
0:0.1.1-90.el7cf
rubygem-nio4r
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.3.1-1.el7cf
0:2.3.1-1.el7cf
rubygem-nio4r-debuginfo
Red Hat:cloudforms_managementengine:5.10::el7
 before 0:2.3.1-1.el7cf
0:2.3.1-1.el7cf
rubygem-loofah
SUSE:OpenStack Cloud 7
 before 2.0.2-3.5.1
2.0.2-3.5.1
rubygem-loofah
SUSE:OpenStack Cloud Crowbar 8
 before 2.0.2-3.5.1
2.0.2-3.5.1
rubygem-loofah
SUSE:Enterprise Storage 4
 before 2.0.2-3.5.1
2.0.2-3.5.1
rubygem-loofah
SUSE:OpenStack Cloud 7
 before 2.0.2-3.8.1
2.0.2-3.8.1
rubygem-loofah
SUSE:OpenStack Cloud Crowbar 8
 before 2.0.2-3.8.1
2.0.2-3.8.1
rubygem-loofah
SUSE:OpenStack Cloud Crowbar 9
 before 2.0.2-3.8.1
2.0.2-3.8.1
rubygem-loofah
SUSE:Enterprise Storage 4
 before 2.0.2-3.8.1
2.0.2-3.8.1
rubygem-loofah
SUSE:OpenStack Cloud Crowbar 8
 before 2.0.2-3.11.1
2.0.2-3.11.1
rubygem-loofah
SUSE:OpenStack Cloud Crowbar 9
 before 2.0.2-3.11.1
2.0.2-3.11.1
rubygem-loofah
openSUSE:Tumbleweed
 before 2.14.0-1.1
2.14.0-1.1
rubygem-nokogiri
openSUSE:Tumbleweed
 before 1.13.3-1.1
1.13.3-1.1
ruby3.2-rubygem-loofah
openSUSE:Tumbleweed
 before 2.19.1-1.2
2.19.1-1.2
ruby3.2-rubygem-nokogiri
openSUSE:Tumbleweed
 before 1.13.9-1.7
1.13.9-1.7
rubygem-loofah
openSUSE:Tumbleweed
 before 2.22.0-1.5
2.22.0-1.5
rubygem-nokogiri
openSUSE:Tumbleweed
 before 1.15.5-1.5
1.15.5-1.5
rubygem-nokogiri
openSUSE:Tumbleweed
 before 1.18.2-1.1
1.18.2-1.1
rubygem-loofah
openSUSE:Tumbleweed
 before 2.23.1-1.3
2.23.1-1.3
rubygem-loofah
openSUSE:Tumbleweed
 before 2.23.1-1.5
2.23.1-1.5
rubygem-nokogiri
openSUSE:Tumbleweed
 before 1.18.9-1.4
1.18.9-1.4

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-8048 is a medium vulnerability (CVSS 6.1) in Loofah Project Loofah, published March 21, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.93%, the 80th percentile. Fixed in loofah 2.2.1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 52 versions and 317 references. The JSON record has them. Also not on the record: 52 package claims. ID and package lookups still check them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open