Lucene search
GoogleOSV:CVE-2018-5773HistoryJan 18, 2018 - 9:29 p.m.
CVE-2018-5773
2018-01-1821:29:00
Google
osv.dev
8
An issue was discovered in markdown2 (aka python-markdown2) through 2.3.5. The safe_mode feature, which is supposed to sanitize user input against XSS, is flawed and does not escape the input properly. With a crafted payload, XSS can be triggered, as demonstrated by omitting the final ‘>’ character from an IMG tag.
Related
fedora
fedora
[SECURITY] Fedora 28 Update: python-markdown2-2.3.7-1.fc28
2019-02-18 01:27:34
[SECURITY] Fedora 27 Update: python-markdown2-2.3.6-1.fc27
2018-10-10 21:55:08
[SECURITY] Fedora 29 Update: python-markdown2-2.3.6-1.fc29
2018-10-09 00:07:50
veracode
veracode
Cross-site Scripting (XSS)
2018-01-19 04:50:24
Cross-Site Scripting (XSS)
2020-07-07 07:40:16
nessus
nessus
Fedora 27 : python-markdown2 (2018-e52160d0bc)
2018-10-11 00:00:00
Fedora 29 : python-markdown2 (2018-6a8028084d)
2019-01-03 00:00:00
Fedora 29 : python-markdown2 (2019-095c760511)
2019-02-19 00:00:00
openvas
openvas
Fedora Update for python-markdown2 FEDORA-2019-a16e1127d3
2019-02-18 00:00:00
Fedora Update for python-markdown2 FEDORA-2018-e52160d0bc
2018-10-11 00:00:00
Fedora Update for python-markdown2 FEDORA-2019-095c760511
2019-05-07 00:00:00
github
github
markdown2 is vulnerable to cross-site scripting
2018-07-12 20:29:21
osv
osv
markdown2 is vulnerable to cross-site scripting
2018-07-12 20:29:21
PYSEC-2018-13
2018-01-18 21:29:00
python310-markdown2-2.4.13-1.2 on GA media
2024-07-12 00:00:00
nvd
nvd
CVE-2018-5773
2018-01-18 21:29:00
prion
prion
Design/Logic Flaw
2018-01-18 21:29:00
cvelist
cvelist
CVE-2018-5773
2018-01-18 21:00:00
cve
cve
CVE-2018-5773
2018-01-18 21:29:00