CVE-2020-6802 PUBLISHED

In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option.

EPSS 0.27% · 50.7th percentile

Risk Scores

EPSS Score
0.27%
50.7th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSpython-bleach0, 2.0-1, 2.1.2-1
Ubuntu:16.04:LTSpython-bleach0, 1.4-1, 1.4.2-1

Timeline

References

Open in Interactive Console →