Логотип exploitDog
bind:CVE-2021-43818
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-43818

Количество 20

Количество 20

ubuntu логотип

CVE-2021-43818

больше 3 лет назад

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant context should upgrade to lxml 4.6.5 to receive a patch. There are no known workarounds available.

CVSS3: 8.2
EPSS: Низкий
redhat логотип

CVE-2021-43818

больше 3 лет назад

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant context should upgrade to lxml 4.6.5 to receive a patch. There are no known workarounds available.

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2021-43818

больше 3 лет назад

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant context should upgrade to lxml 4.6.5 to receive a patch. There are no known workarounds available.

CVSS3: 8.2
EPSS: Низкий
msrc логотип

CVE-2021-43818

больше 3 лет назад

CVSS3: 7.1
EPSS: Низкий
debian логотип

CVE-2021-43818

больше 3 лет назад

lxml is a library for processing XML and HTML in the Python language. ...

CVSS3: 8.2
EPSS: Низкий
rocky логотип

RLSA-2022:1932

около 3 лет назад

Moderate: python-lxml security update

EPSS: Низкий
rocky логотип

RLSA-2022:1763

около 3 лет назад

Moderate: python39:3.9 and python39-devel:3.9 security update

EPSS: Низкий
github логотип

GHSA-55x5-fj6c-h6m8

больше 3 лет назад

lxml's HTML Cleaner allows crafted and SVG embedded scripts to pass through

CVSS3: 8.2
EPSS: Низкий
oracle-oval логотип

ELSA-2022-1932

около 3 лет назад

ELSA-2022-1932: python-lxml security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2022-1763

около 3 лет назад

ELSA-2022-1763: python39:3.9 and python39-devel:3.9 security update (MODERATE)

EPSS: Низкий
fstec логотип

BDU:2022-00756

больше 3 лет назад

Уязвимость реализации модуля Class Cleaner библиотеки для обработки разметки XML и HTML Lxml, позволяющая нарушителю осуществлять межсайтовые сценарные атаки

CVSS3: 8.2
EPSS: Низкий
redos логотип

ROS-20220125-14

больше 3 лет назад

Уязвимость библиотеки Lxml

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2022:0803-1

больше 3 лет назад

Security update for python-lxml

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:0895-1

больше 3 лет назад

Security update for python-lxml

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:0803-1

больше 3 лет назад

Security update for python-lxml

EPSS: Низкий
rocky логотип

RLSA-2022:1764

около 3 лет назад

Moderate: python38:3.8 and python38-devel:3.8 security update

EPSS: Низкий
oracle-oval логотип

ELSA-2022-1764

около 3 лет назад

ELSA-2022-1764: python38:3.8 and python38-devel:3.8 security update (MODERATE)

EPSS: Низкий
rocky логотип

RLSA-2022:1821

около 3 лет назад

Moderate: python27:2.7 security update

EPSS: Низкий
oracle-oval логотип

ELSA-2022-1821

около 3 лет назад

ELSA-2022-1821: python27:2.7 security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2022-9341

около 3 лет назад

ELSA-2022-9341: ol-automation-manager security update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2021-43818

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant context should upgrade to lxml 4.6.5 to receive a patch. There are no known workarounds available.

CVSS3: 8.2
3%
Низкий
больше 3 лет назад
redhat логотип
CVE-2021-43818

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant context should upgrade to lxml 4.6.5 to receive a patch. There are no known workarounds available.

CVSS3: 8.8
3%
Низкий
больше 3 лет назад
nvd логотип
CVE-2021-43818

lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ the HTML cleaner in a security relevant context should upgrade to lxml 4.6.5 to receive a patch. There are no known workarounds available.

CVSS3: 8.2
3%
Низкий
больше 3 лет назад
msrc логотип
CVSS3: 7.1
3%
Низкий
больше 3 лет назад
debian логотип
CVE-2021-43818

lxml is a library for processing XML and HTML in the Python language. ...

CVSS3: 8.2
3%
Низкий
больше 3 лет назад
rocky логотип
RLSA-2022:1932

Moderate: python-lxml security update

3%
Низкий
около 3 лет назад
rocky логотип
RLSA-2022:1763

Moderate: python39:3.9 and python39-devel:3.9 security update

3%
Низкий
около 3 лет назад
github логотип
GHSA-55x5-fj6c-h6m8

lxml's HTML Cleaner allows crafted and SVG embedded scripts to pass through

CVSS3: 8.2
3%
Низкий
больше 3 лет назад
oracle-oval логотип
ELSA-2022-1932

ELSA-2022-1932: python-lxml security update (MODERATE)

около 3 лет назад
oracle-oval логотип
ELSA-2022-1763

ELSA-2022-1763: python39:3.9 and python39-devel:3.9 security update (MODERATE)

около 3 лет назад
fstec логотип
BDU:2022-00756

Уязвимость реализации модуля Class Cleaner библиотеки для обработки разметки XML и HTML Lxml, позволяющая нарушителю осуществлять межсайтовые сценарные атаки

CVSS3: 8.2
3%
Низкий
больше 3 лет назад
redos логотип
ROS-20220125-14

Уязвимость библиотеки Lxml

3%
Низкий
больше 3 лет назад
suse-cvrf логотип
openSUSE-SU-2022:0803-1

Security update for python-lxml

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:0895-1

Security update for python-lxml

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:0803-1

Security update for python-lxml

больше 3 лет назад
rocky логотип
RLSA-2022:1764

Moderate: python38:3.8 and python38-devel:3.8 security update

около 3 лет назад
oracle-oval логотип
ELSA-2022-1764

ELSA-2022-1764: python38:3.8 and python38-devel:3.8 security update (MODERATE)

около 3 лет назад
rocky логотип
RLSA-2022:1821

Moderate: python27:2.7 security update

около 3 лет назад
oracle-oval логотип
ELSA-2022-1821

ELSA-2022-1821: python27:2.7 security update (MODERATE)

около 3 лет назад
oracle-oval логотип
ELSA-2022-9341

ELSA-2022-9341: ol-automation-manager security update (IMPORTANT)

около 3 лет назад

Уязвимостей на страницу