CVE-2017-15612

Опубликовано: 19 окт. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\nscript:) or a crafted email address, related to the escape and autolink functions.

Ссылки

https://github.com/lepture/mistune/pull/140
Exploit
Issue Tracking
Patch
Third Party Advisory
https://github.com/lepture/mistune/pull/140
Exploit
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mistune_project:mistune:0.7.4:*:*:*:*:*:*:*

EPSS

Процентиль: 58%

0.00923

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2017-15612

CVSS3: 6.1

ubuntu

почти 9 лет назад

mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\nscript:) or a crafted email address, related to the escape and autolink functions.

CVE-2017-15612

CVSS3: 6.1

debian

почти 9 лет назад

mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such ...

GHSA-hpv5-v8g5-c864

CVSS3: 6.1

github

больше 4 лет назад

Cross-site Scripting in Mistune

openSUSE-SU-2018:0402-1

suse-cvrf

больше 8 лет назад

Security update for python-mistune

EPSS

Процентиль: 58%

0.00923

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79