CVE-2020-26870

Опубликовано: 07 окт. 2020

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree, and a namespace can change from HTML to MathML, as demonstrated by nesting of FORM elements.

Ссылки

https://github.com/cure53/DOMPurify/commit/02724b8eb048dd219d6725b05c3000936f11d62d
Patch
Third Party Advisory
https://github.com/cure53/DOMPurify/compare/2.0.16...2.0.17
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/10/msg00029.html
Mailing List
Third Party Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-26870
Patch
Vendor Advisory
https://research.securitum.com/mutation-xss-via-mathml-mutation-dompurify-2-0-17-bypass/
Exploit
Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.html
Patch
Third Party Advisory
https://github.com/cure53/DOMPurify/commit/02724b8eb048dd219d6725b05c3000936f11d62d
Patch
Third Party Advisory
https://github.com/cure53/DOMPurify/compare/2.0.16...2.0.17
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/10/msg00029.html
Mailing List
Third Party Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-26870
Patch
Vendor Advisory
https://research.securitum.com/mutation-xss-via-mathml-mutation-dompurify-2-0-17-bypass/
Exploit
Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.html
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cure53:dompurify:*:*:*:*:*:*:*:*

Версия до 2.0.17 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:microsoft:visual_studio_2017:15.9:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:visual_studio_2019:16.0:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:visual_studio_2019:16.4:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:visual_studio_2019:16.7:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:visual_studio_2019:16.8:*:*:*:*:*:*:*

Конфигурация 4

cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:*

Версия до 21.1.0.00.01 (исключая)

EPSS

Процентиль: 61%

0.00417

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2020-26870

CVSS3: 6.1

ubuntu

больше 5 лет назад

CVE-2020-26870

CVSS3: 7

msrc

около 5 лет назад

Visual Studio Remote Code Execution Vulnerability

CVE-2020-26870

CVSS3: 6.1

debian

больше 5 лет назад

Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs becaus ...

GHSA-63q7-h895-m982

CVSS3: 6.1

github

около 5 лет назад

Cross-site Scripting in dompurify

BDU:2021-00576

CVSS3: 6.1

fstec

больше 5 лет назад

Уязвимость библиотеки DOMPurify, связанная с непринятием мер по защите структуры веб-старницы, позволяющая нарушителю осуществить межсайтовую сценарную атаку

EPSS

Процентиль: 61%

0.00417

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79