REDHAT-BUG-2101882: XSS
Possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer may allow an attacker to inject content if the application developer has overridden the sanitizer's allowed tags to allow both select and style elements.Code is only impacted if allowed tags are being overridden.
Reference:
https://hackerone.com/reports/1530898
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2101882?
The severity of REDHAT-BUG-2101882 is considered high due to the potential for XSS attacks if certain configurations are misconfigured.
How can I fix REDHAT-BUG-2101882?
To resolve REDHAT-BUG-2101882, ensure that your application's allowed tags in Rails::Html::Sanitizer do not include both 'select' and 'style' elements.
Who is affected by REDHAT-BUG-2101882?
Developers using Ruby on Rails with customized configurations of Rails::Html::Sanitizer that allow specific HTML tags are affected by REDHAT-BUG-2101882.
What are the risks associated with REDHAT-BUG-2101882?
The risks associated with REDHAT-BUG-2101882 include potential cross-site scripting (XSS) attacks that could allow attackers to inject malicious content.
Is there a workaround for REDHAT-BUG-2101882?
A workaround for REDHAT-BUG-2101882 is to use the default configuration of Rails::Html::Sanitizer without overriding the allowed tags.