Описание
mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\nscript:) or a crafted email address, related to the escape and autolink functions.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| mistune | fixed | 0.8-1 | package | |
| mistune | no-dsa | stretch | package |
Примечания
https://github.com/lepture/mistune/pull/140
https://github.com/lepture/mistune/commit/d6f0b6402299bf5a380e7b4e77bd80e8736630fe
EPSS
Процентиль: 45%
0.00223
Низкий
Связанные уязвимости
CVSS3: 6.1
ubuntu
больше 8 лет назад
mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\nscript:) or a crafted email address, related to the escape and autolink functions.
CVSS3: 6.1
nvd
больше 8 лет назад
mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\nscript:) or a crafted email address, related to the escape and autolink functions.
EPSS
Процентиль: 45%
0.00223
Низкий