CVE-2020-6816 PUBLISHED

In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argument strip=False.

EPSS 0.42% · 61.7th percentile

Risk Scores

EPSS Score
0.42%
61.7th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSpython-bleach0, 1.4-1, 1.4.2-1
Ubuntu:20.04:LTSpython-bleach3.1.1-1, 0, 3.1.0-1
Ubuntu:18.04:LTSpython-bleach2.0-1, 2.1.2-1, 0

Timeline

References

Open in Interactive Console →