Lucene search
GoogleOSV:CVE-2021-29272HistoryMar 27, 2021 - 6:15 p.m.
CVE-2021-29272
2021-03-2718:15:13
Google
osv.dev
4
bluemonday before 1.0.5 allows XSS because certain Go lowercasing converts an uppercase Cyrillic character, defeating a protection mechanism against the “script” string.
| CPE | Name | Operator | Version |
|---|---|---|---|
| bluemonday | eq | 1.0.3 | |
| bluemonday | eq | 1.0.2 | |
| bluemonday | eq | 1.0.4 | |
| bluemonday | eq | 1.0.0 | |
| bluemonday | eq | 1.0.1 |
Related
alpinelinux
alpinelinux
CVE-2021-29272
2021-03-27 18:15:13
github
github
Cross-site scripting in bluemonday
2021-05-18 21:07:37
redhatcve
redhatcve
CVE-2021-29272
2021-03-29 18:02:59
veracode
veracode
Cross-site Scripting (XSS)
2021-03-29 04:20:50
prion
prion
Design/Logic Flaw
2021-03-27 18:15:00
cve
cve
CVE-2021-29272
2021-03-27 18:15:13
nvd
nvd
CVE-2021-29272
2021-03-27 18:15:13
ubuntucve
ubuntucve
CVE-2021-29272
2021-03-27 00:00:00
osv
osv
Cross-site scripting due to incorrect sanitization in github.com/microcosm-cc/bluemonday
2021-05-18 21:07:37
Cross-site scripting in bluemonday
2021-05-18 21:07:37
cvelist
cvelist
CVE-2021-29272
2021-03-27 17:57:28