CVE-2021-26539

2021-02-0816:16:06

mitre

raw.githubusercontent.com

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.9%

JSON

Apostrophe Technologies sanitize-html before 2.3.1 does not properly handle internationalized domain name (IDN) which could allow an attacker to bypass hostname whitelist validation set by the “allowedIframeHostnames” option.