VDB
GCVE-110-MAGEIA-2021-38
GCVE-110-MAGEIA-2021-38
Advisory Published
A XSS vulnerability was discovered in python-lxml's clean module. The module's
parser didn't properly imitate browsers, which caused different behaviors
between the sanitizer and the user's page. A remote attacker could exploit
this flaw to run arbitrary HTML/JS code. (CVE-2020-27783).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | python-lxml | 4.3.0-1.2.mga7 (unaffected), 0 (affected), 0 (affected), 4.3.0-1.2.mga7 (unaffected) | — |
| Mageia | libfm | 0 (affected), 1.3.2-1.mga8 (unaffected) | — |
| Mageia | lxpanel | 0 (affected), 0.10.1-1.mga8 (unaffected) | — |
| Mageia | pcmanfm | 0 (affected), 1.3.2-1.mga8 (unaffected) | — |
| Mageia | lxterminal | 0 (affected), 0.4.0-1.mga8 (unaffected) | — |
References
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.