VDB

DEBIAN-CVE-2020-6802

DEBIAN-CVE-2020-6802 PUBLISHED CVSS 6.099999904632568 MEDIUM

In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option.

Risk Scores

CVSS 3.1
6.099999904632568
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Products

VendorProductVersions
Debian:13python-bleach0, 0, 0
Debian:12python-bleach0, 0, 0
Debian:11python-bleach0, 0, 0
Debian:14python-bleach0, 0, 0

Timeline

  • Mar 24, 2020 CVE Published
  • Apr 28, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›