Количество 4
Количество 4
CVE-2021-26539
Apostrophe Technologies sanitize-html before 2.3.1 does not properly handle internationalized domain name (IDN) which could allow an attacker to bypass hostname whitelist validation set by the "allowedIframeHostnames" option.
CVE-2021-26539
Apostrophe Technologies sanitize-html before 2.3.1 does not properly handle internationalized domain name (IDN) which could allow an attacker to bypass hostname whitelist validation set by the "allowedIframeHostnames" option.
CVE-2021-26539
Apostrophe Technologies sanitize-html before 2.3.1 does not properly h ...
GHSA-rjqq-98f6-6j3r
Improper Input Validation in sanitize-html
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-26539 Apostrophe Technologies sanitize-html before 2.3.1 does not properly handle internationalized domain name (IDN) which could allow an attacker to bypass hostname whitelist validation set by the "allowedIframeHostnames" option. | CVSS3: 5.3 | 0% Низкий | около 5 лет назад |
 | CVE-2021-26539 Apostrophe Technologies sanitize-html before 2.3.1 does not properly handle internationalized domain name (IDN) which could allow an attacker to bypass hostname whitelist validation set by the "allowedIframeHostnames" option. | CVSS3: 5.3 | 0% Низкий | около 5 лет назад |
| CVE-2021-26539 Apostrophe Technologies sanitize-html before 2.3.1 does not properly h ... | CVSS3: 5.3 | 0% Низкий | около 5 лет назад |
| GHSA-rjqq-98f6-6j3r Improper Input Validation in sanitize-html | CVSS3: 5.3 | 0% Низкий | почти 5 лет назад |
Уязвимостей на страницу