Redcloth

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-31606 Jun 06, 17:15 Ruby HIGH POC PATCH This Week

A Regular Expression Denial of Service (ReDoS) issue was discovered in the sanitize_html function of redcloth gem v4.0.0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Redcloth

NVD GitHub

CVSS 3.1

7.5

EPSS

1.5%

CVE-2012-6684 Jan 08, 01:59 Ruby MEDIUM POC PATCH This Month

Cross-site scripting (XSS) vulnerability in the RedCloth library 4.2.9 for Ruby and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

XSS Debian Debian Linux Redcloth Library Redcloth

NVD GitHub

CVSS 2.0

4.3

EPSS

0.3%

CVE-2023-31606 Ruby

EPSS 2% CVSS 7.5

HIGH POC PATCH This Week

Denial Of Service Redcloth

NVD GitHub

CVE-2012-6684 Ruby

EPSS 0% CVSS 4.3

MEDIUM POC PATCH This Month

XSS Debian Debian Linux +2

NVD GitHub