Lucene search

K
osvGoogleOSV:GHSA-7QW4-W7HF-22Q3
HistoryMay 14, 2022 - 3:03 a.m.

xapian-core Cross-site Scripting vulnerability

2022-05-1403:03:56
Google
osv.dev
7

0.001 Low

EPSS

Percentile

48.4%

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet().