Lucene search
PRIOn knowledge basePRION:CVE-2019-10772HistoryDec 11, 2019 - 4:15 p.m.
Design/Logic Flaw
2019-12-1116:15:00
PRIOn knowledge base
www.prio-n.com
0.001 Low
EPSS
Percentile
41.4%
It is possible to bypass enshrined/svg-sanitize before 0.13.1 using the “xlink:href” attribute due to mishandling of the xlink namespace by the sanitizer.
| CPE | Name | Operator | Version |
|---|---|---|---|
| svg-sanitizer | lt | 0.13.1 |
Related
cvelist
cvelist
CVE-2019-10772
2019-12-11 15:23:04
veracode
veracode
Cross-Site Scripting (XSS)
2019-12-12 05:45:25
osv
osv
Sanitizer bypass in svg-sanitizer
2020-02-27 20:36:29
CVE-2019-10772
2019-12-11 16:15:10
nvd
nvd
CVE-2019-10772
2019-12-11 16:15:10
github
github
Sanitizer bypass in svg-sanitizer
2020-02-27 20:36:29
cve
cve
CVE-2019-10772
2019-12-11 16:15:10