Описание
The _writeAttrs function in SafeHTML before 1.3.2 does not properly handle quotes in attribute values, which could allow remote attackers to exploit cross-site scripting (XSS) vulnerabilities in applications that rely on SafeHTML for protection.
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:pixel-apes_group:safehtml:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:pixel-apes_group:safehtml:1.2.0:*:*:*:*:*:*:*
cpe:2.3:a:pixel-apes_group:safehtml:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:pixel-apes_group:safehtml:1.3.0:*:*:*:*:*:*:*
cpe:2.3:a:pixel-apes_group:safehtml:1.3.1:*:*:*:*:*:*:*
EPSS
Процентиль: 59%
0.0038
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
The _writeAttrs function in SafeHTML before 1.3.2 does not properly handle quotes in attribute values, which could allow remote attackers to exploit cross-site scripting (XSS) vulnerabilities in applications that rely on SafeHTML for protection.
EPSS
Процентиль: 59%
0.0038
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other