Описание
The HTML Sanitizer should have sanitized the href attribute of SVG <use> tags; however it incorrectly did not sanitize xlink:href attributes. This vulnerability affects Firefox < 102.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 102.0+build2-0ubuntu0.18.04.1 |
| devel | not-affected | code not present |
| esm-infra/focal | DNE | |
| focal | released | 102.0+build2-0ubuntu0.20.04.1 |
| impish | released | 102.0+build2-0ubuntu0.21.10.1 |
| jammy | not-affected | code not present |
| kinetic | not-affected | code not present |
| lunar | not-affected | code not present |
| trusty | DNE | |
| upstream | released | 102 |
Показывать по
6.1 Medium
CVSS3
Связанные уязвимости
The HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code><use></code> tags; however it incorrectly did not sanitize <code>xlink:href</code> attributes. This vulnerability affects Firefox < 102.
The HTML Sanitizer should have sanitized the <code>href</code> attribu ...
The HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code><use></code> tags; however it incorrectly did not sanitize <code>xlink:href</code> attributes. This vulnerability affects Firefox < 102.
6.1 Medium
CVSS3