Lucene search

K
redhatcveRedhat.comRH:CVE-2017-15612
HistoryMay 20, 2022 - 11:09 p.m.

CVE-2017-15612

2022-05-2023:09:56
redhat.com
access.redhat.com
7
mistune version 0.7.4
xss vulnerability
newline
crafted email address
escape function
autolink function

EPSS

0.001

Percentile

38.0%

mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\nscript:) or a crafted email address, related to the escape and autolink functions.