CVE-2020-26298 — Injection in Redcarpet

CWE-74 — InjectionCWE-79 — Cross-site Scripting6 documents5 sources
Severity
5.4MEDIUMNVD
EPSS
0.3%
top 43.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
VMG RedcarpetRedcarpet Project RedcarpetDebian Ruby-redcarpet+1 more
Timeline
PublishedJan 11

Description

Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version 3.5.1, there is an injection vulnerability which can enable a cross-site scripting attack. In affected versions no HTML escaping was being performed when processing quotes. This applies even when the `:escape_html` option was being used. This is fixed in version 3.5.1 by the referenced commit.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NExploitability: 2.3 | Impact: 2.7

Affected Packages4 packages

▶debiandebian/ruby-redcarpet< ruby-redcarpet 3.5.1-1 (bookworm)
▶CVEListV5vmg/redcarpet< 3.5.1
▶RubyGemsredcarpet_project/redcarpet< 3.5.1

Also affects: Debian Linux 10.0, 9.0

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
Injection/XSS in Redcarpet↗2021-01-11
▶
OSV
CVE-2020-26298: Redcarpet is a Ruby library for Markdown processing↗2021-01-11
▶
OSV
Injection/XSS in Redcarpet↗2021-01-11
▶

📋Vendor Advisories

2
Red Hat
rubygem-redcarpet: does not escape HTML when processing quotes which could result in XSS vulnerability↗2021-01-11
▶
Debian
CVE-2020-26298: ruby-redcarpet - Redcarpet is a Ruby library for Markdown processing. In Redcarpet before version...↗2020
▶
CVE-2020-26298 — Injection in VMG Redcarpet | cvebase