Lucene search
SnykCVELIST:CVE-2019-10772HistoryDec 11, 2019 - 3:23 p.m.
CVE-2019-10772
2019-12-1115:23:04
snyk
www.cve.org
0.001 Low
EPSS
Percentile
41.4%
It is possible to bypass enshrined/svg-sanitize before 0.13.1 using the “xlink:href” attribute due to mishandling of the xlink namespace by the sanitizer.
CNA Affected
[
{
"product": "enshrined/svg-sanitize",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "All versions prior to version 0.13.1"
}
]
}
]Related
veracode
veracode
Cross-Site Scripting (XSS)
2019-12-12 05:45:25
osv
osv
Sanitizer bypass in svg-sanitizer
2020-02-27 20:36:29
CVE-2019-10772
2019-12-11 16:15:10
prion
prion
Design/Logic Flaw
2019-12-11 16:15:00
nvd
nvd
CVE-2019-10772
2019-12-11 16:15:10
cve
cve
CVE-2019-10772
2019-12-11 16:15:10
github
github
Sanitizer bypass in svg-sanitizer
2020-02-27 20:36:29