Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-62177
HistoryJun 30, 2022 - 12:00 a.m.

lettersanitizer denial of service vulnerability

2022-06-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
lettersanitizer dom-based html email cleaner 1.0.2 denial-of-service vulnerability cnvd attacker vulnerability handling error messages application

EPSS

0.001

Percentile

46.6%

lettersanitizer is a DOM-based HTML email cleaner for in-browser email rendering. lettersanitizer versions prior to 1.0.2 contain a denial-of-service vulnerability. The vulnerability stems from a failure to properly handle incoming error messages, and can be exploited by an attacker to cause a denial of service of the application.

EPSS

0.001

Percentile

46.6%