Lucene search
MitreCVELIST:CVE-2023-49146HistoryNov 22, 2023 - 12:00 a.m.
CVE-2023-49146
2023-11-2200:00:00
mitre
www.cve.org
domsanitizer
xss
svg
comments
regular expressions
0.0005 Low
EPSS
Percentile
17.1%
DOMSanitizer (aka dom-sanitizer) before 1.0.7 allows XSS via an SVG document because of mishandling of comments and greedy regular expressions.
Related
nvd
nvd
CVE-2023-49146
2023-11-22 22:15:08
osv
osv
Cross-site Scripting in DOMSanitizer
2023-11-23 00:30:58
CVE-2023-49146
2023-11-22 22:15:08
cve
cve
CVE-2023-49146
2023-11-22 22:15:08
github
github
Cross-site Scripting in DOMSanitizer
2023-11-23 00:30:58
veracode
veracode
Cross Site Scripting (XSS)
2023-11-23 06:56:27
prion
prion
Design/Logic Flaw
2023-11-22 22:15:00