Описание
Cross site scripting in comrak
An issue was discovered in the comrak crate before 0.9.1 for Rust. Cross site scripting (XSS) can occur because the protection mechanism for data: and javascript: URIs is case-sensitive, allowing (for example) Data: to be used in an attack.
Пакеты
Наименование
comrak
rust
Затронутые версииВерсия исправления
< 0.9.1
0.9.1
Связанные уязвимости
CVSS3: 6.1
nvd
почти 5 лет назад
An issue was discovered in the comrak crate before 0.9.1 for Rust. XSS can occur because the protection mechanism for data: and javascript: URIs is case-sensitive, allowing (for example) Data: to be used in an attack.