CVE-2019-10772

2019-12-1116:15:10

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.4%

JSON

It is possible to bypass enshrined/svg-sanitize before 0.13.1 using the “xlink:href” attribute due to mishandling of the xlink namespace by the sanitizer.

CPENameOperatorVersion
svg-sanitizereq0.7.0
svg-sanitizereq0.1.1
svg-sanitizereq0.8.0
svg-sanitizereq0.9.0
svg-sanitizereq0.5.3.1
svg-sanitizereq0.1.3
svg-sanitizereq0.8.2
svg-sanitizereq0.1.5
svg-sanitizereq0.10.0
svg-sanitizereq0.2.0

Name	Operator	Version
svg-sanitizer	eq	0.7.0
svg-sanitizer	eq	0.1.1
svg-sanitizer	eq	0.8.0
svg-sanitizer	eq	0.9.0
svg-sanitizer	eq	0.5.3.1
svg-sanitizer	eq	0.1.3
svg-sanitizer	eq	0.8.2
svg-sanitizer	eq	0.1.5
svg-sanitizer	eq	0.10.0
svg-sanitizer	eq	0.2.0