VDB

CVE-2017-16876

CVE-2017-16876 PUBLISHED CVSS 6.099999904632568 MEDIUM

Cross-site scripting (XSS) vulnerability in the _keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument.

EPSS 2.24% · 82.2th percentile

Risk Scores

CVSS 3.0
6.099999904632568
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
2.24%
82.2th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSmistune0, 0.6-2, 0.7.1-1

Timeline

  • Dec 29, 2017 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Oct 27, 2021 EPSS Score
  • Dec 29, 2021 EPSS Score
  • Mar 2, 2022 EPSS Score
  • Jul 6, 2022 EPSS Score
  • Sep 8, 2022 EPSS Score
  • Nov 10, 2022 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Mar 16, 2023 EPSS Score
  • May 18, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›