CVE-2022-23518.yml

---
gem: rails-html-sanitizer
cve: 2022-23518
ghsa: mcvf-2q2m-x72m
url: https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-mcvf-2q2m-x72m
title: "Improper neutralization of data URIs may allow XSS in rails-html-sanitizer"
date: 2022-12-13
description: |
  ## Summary

  rails-html-sanitizer `>= 1.0.3, < 1.4.4` is vulnerable to cross-site scripting via data URIs when used in combination with Loofah `>= 2.1.0`.

  ## Mitigation

  Upgrade to rails-html-sanitizer `>= 1.4.4`.
cvss_v3: 6.1
unaffected_versions:
  - "< 1.0.3"
patched_versions:
  - ">= 1.4.4"
related:
  url:
    - https://cwe.mitre.org/data/definitions/79.html
    - https://github.com/w3c/svgwg/issues/266
    - https://github.com/rails/rails-html-sanitizer/issues/135
    - https://hackerone.com/reports/1694173