Логотип exploitDog
bind: "CVE-2025-22872"
Консоль
Логотип exploitDog

exploitDog

bind: "CVE-2025-22872"

Количество 31

Количество 31

ubuntu логотип

CVE-2025-22872

7 месяцев назад

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content following such tags as being placed in the wrong scope during DOM construction, but only when tags are in foreign content (e.g. <math>, <svg>, etc contexts).

CVSS3: 6.5
EPSS: Низкий
redhat логотип

CVE-2025-22872

7 месяцев назад

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content following such tags as being placed in the wrong scope during DOM construction, but only when tags are in foreign content (e.g. <math>, <svg>, etc contexts).

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2025-22872

7 месяцев назад

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content following such tags as being placed in the wrong scope during DOM construction, but only when tags are in foreign content (e.g. <math>, <svg>, etc contexts).

CVSS3: 6.5
EPSS: Низкий
msrc логотип

CVE-2025-22872

6 месяцев назад

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2025-22872

7 месяцев назад

The tokenizer incorrectly interprets tags with unquoted attribute valu ...

CVSS3: 6.5
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02515-1

3 месяца назад

Security update for kubernetes1.18

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02383-2

3 месяца назад

Security update for kubernetes1.26

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02383-1

4 месяца назад

Security update for kubernetes1.26

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02366-2

3 месяца назад

Security update for docker

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02366-1

4 месяца назад

Security update for docker

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02351-1

4 месяца назад

Security update for kubernetes1.25

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02350-2

3 месяца назад

Security update for kubernetes1.28

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02350-1

4 месяца назад

Security update for kubernetes1.28

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02336-1

4 месяца назад

Security update for kubernetes1.27

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:02121-1

4 месяца назад

Security update for helm

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:01945-1

5 месяцев назад

Security update for kubernetes-old

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:01941-1

5 месяцев назад

Security update for kubernetes1.24

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:01940-2

3 месяца назад

Security update for kubernetes1.23

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:01940-1

5 месяцев назад

Security update for kubernetes1.23

EPSS: Низкий
github логотип

GHSA-vvgc-356p-c3xw

7 месяцев назад

golang.org/x/net vulnerable to Cross-site Scripting

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2025-22872

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content following such tags as being placed in the wrong scope during DOM construction, but only when tags are in foreign content (e.g. <math>, <svg>, etc contexts).

CVSS3: 6.5
0%
Низкий
7 месяцев назад
redhat логотип
CVE-2025-22872

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content following such tags as being placed in the wrong scope during DOM construction, but only when tags are in foreign content (e.g. <math>, <svg>, etc contexts).

CVSS3: 6.5
0%
Низкий
7 месяцев назад
nvd логотип
CVE-2025-22872

The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content following such tags as being placed in the wrong scope during DOM construction, but only when tags are in foreign content (e.g. <math>, <svg>, etc contexts).

CVSS3: 6.5
0%
Низкий
7 месяцев назад
msrc логотип
CVSS3: 6.5
0%
Низкий
6 месяцев назад
debian логотип
CVE-2025-22872

The tokenizer incorrectly interprets tags with unquoted attribute valu ...

CVSS3: 6.5
0%
Низкий
7 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:02515-1

Security update for kubernetes1.18

0%
Низкий
3 месяца назад
suse-cvrf логотип
SUSE-SU-2025:02383-2

Security update for kubernetes1.26

0%
Низкий
3 месяца назад
suse-cvrf логотип
SUSE-SU-2025:02383-1

Security update for kubernetes1.26

0%
Низкий
4 месяца назад
suse-cvrf логотип
SUSE-SU-2025:02366-2

Security update for docker

0%
Низкий
3 месяца назад
suse-cvrf логотип
SUSE-SU-2025:02366-1

Security update for docker

0%
Низкий
4 месяца назад
suse-cvrf логотип
SUSE-SU-2025:02351-1

Security update for kubernetes1.25

0%
Низкий
4 месяца назад
suse-cvrf логотип
SUSE-SU-2025:02350-2

Security update for kubernetes1.28

0%
Низкий
3 месяца назад
suse-cvrf логотип
SUSE-SU-2025:02350-1

Security update for kubernetes1.28

0%
Низкий
4 месяца назад
suse-cvrf логотип
SUSE-SU-2025:02336-1

Security update for kubernetes1.27

0%
Низкий
4 месяца назад
suse-cvrf логотип
SUSE-SU-2025:02121-1

Security update for helm

0%
Низкий
4 месяца назад
suse-cvrf логотип
SUSE-SU-2025:01945-1

Security update for kubernetes-old

0%
Низкий
5 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:01941-1

Security update for kubernetes1.24

0%
Низкий
5 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:01940-2

Security update for kubernetes1.23

0%
Низкий
3 месяца назад
suse-cvrf логотип
SUSE-SU-2025:01940-1

Security update for kubernetes1.23

0%
Низкий
5 месяцев назад
github логотип
GHSA-vvgc-356p-c3xw

golang.org/x/net vulnerable to Cross-site Scripting

0%
Низкий
7 месяцев назад

Уязвимостей на страницу