CVE-2021-23980

🗓️ 30 Mar 2021 16:58:04Reported by redhat.comType

A mutation XSS vulnerability in bleach.clean for svg, math, p, br, style, title, noscript, script, textarea, noframes, iframe, xmp when strip_comments=Fals

Reporter	Title	Published	Views	Family All 30
OpenVAS	Debian: Security Advisory (DLA-2620-1)	7 Apr 202100:00	–	openvas
OpenVAS	Mageia: Security Advisory (MGASA-2021-0260)	28 Jan 202200:00	–	openvas
OpenVAS	Debian: Security Advisory (DSA-4892-1)	19 Apr 202100:00	–	openvas
OpenVAS	openSUSE: Security Advisory for python-bleach (openSUSE-SU-2021:0552-1)	16 Apr 202100:00	–	openvas
Mageia	Updated python-bleach packages fix a security vulnerability	16 Jun 202123:22	–	mageia
OSV	PYSEC-2021-865	2 Feb 202117:58	–	osv
OSV	CVE-2021-23980	16 Feb 202322:15	–	osv
OSV	python-bleach - security update	18 Apr 202100:00	–	osv
OSV	Cross-site scripting in Bleach	2 Feb 202117:58	–	osv
OSV	python-bleach - security update	6 Apr 202100:00	–	osv

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-23980
github	www.github.com/mozilla/bleach/security/advisories/GHSA-vv2x-vrpj-qqpq
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

30 Mar 2021 16:04Current

3.1Low risk

Vulners AI Score3.1

CVSS36.1

EPSS0.001