Skip to content
OpenAdvisories

Vendor

http://haml.info/

1 known vulnerabilities.

Products

haml 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2017-1002201

    Haml vulnerable to cross-site scripting

    In haml versions prior to version 5.0.0.beta.2, when using user input to perform tasks on the server, characters like < > " ' must be escaped properly. In this case, the ' character was missed. An attacker can manipulate the input to introduce additional attr…

    http://haml.info/ haml ruby-haml haml Debian Ubuntu RubyGems