Lucene search

K
cvelistRedhatCVELIST:CVE-2014-3146
HistoryMay 14, 2014 - 7:00 p.m.

CVE-2014-3146

2014-05-1419:00:00
redhat
www.cve.org
1

6.1 Medium

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.0%

Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters in the link scheme to the clean_html function.

6.1 Medium

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.0%