Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5325-xw5m-phm3

Опубликовано: 25 авг. 2021
Источник: github
Github: Прошло ревью
CVSS3: 6.1

Описание

Cross-site Scripting in ammonia

An issue was discovered in the ammonia crate before 3.1.0 for Rust. XSS can occur because the parsing differences for HTML, SVG, and MathML are mishandled, a similar issue to CVE-2020-26870.

Пакеты

Наименование

ammonia

rust
Затронутые версииВерсия исправления

>= 3.0.0, < 3.1.0

3.1.0

Наименование

ammonia

rust
Затронутые версииВерсия исправления

< 2.1.3

2.1.3

EPSS

Процентиль: 42%
0.00201
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
ubuntu
больше 4 лет назад

An issue was discovered in the ammonia crate before 3.1.0 for Rust. XSS can occur because the parsing differences for HTML, SVG, and MathML are mishandled, a similar issue to CVE-2020-26870.

CVSS3: 6.1
nvd
больше 4 лет назад

An issue was discovered in the ammonia crate before 3.1.0 for Rust. XSS can occur because the parsing differences for HTML, SVG, and MathML are mishandled, a similar issue to CVE-2020-26870.

CVSS3: 6.1
debian
больше 4 лет назад

An issue was discovered in the ammonia crate before 3.1.0 for Rust. XS ...

EPSS

Процентиль: 42%
0.00201
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79