VDB
GCVE-110-MAGEIA-2020-176
GCVE-110-MAGEIA-2020-176
Advisory Published
In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA
and either svg or math tags are whitelisted and the keyword argument
strip=False. (CVE-2020-6816)
Regular expression denial of service. (CVE-2020-6817)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | python-bleach | 0 (affected), 3.1.4-1.mga7 (unaffected) | — |
References
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.