Описание
The HTML-StripScripts module through 1.06 for Perl allows _hss_attval_style ReDoS because of catastrophic backtracking for HTML content with certain style attributes.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libhtml-stripscripts-perl | fixed | 1.06-4 | package |
Примечания
https://github.com/clintongormley/perl-html-stripscripts/issues/3
https://github.com/clintongormley/perl-html-stripscripts/pull/4
EPSS
Связанные уязвимости
The HTML-StripScripts module through 1.06 for Perl allows _hss_attval_style ReDoS because of catastrophic backtracking for HTML content with certain style attributes.
The HTML-StripScripts module through 1.06 for Perl allows _hss_attval_style ReDoS because of catastrophic backtracking for HTML content with certain style attributes.
The HTML-StripScripts module through 1.06 for Perl allows _hss_attval_style ReDoS because of catastrophic backtracking for HTML content with certain style attributes.
Уязвимость функции _hss_attval_style модуля для удаления сценариев из HTML документа HTML-StripScripts, позволяющая нарушителю вызвать отказ в обслуживании
EPSS