CVE-2024-52595

creationtimestamp| type| source ---|---|--- 2024-11-20 00:21:54+00:00| seen| https://t.me/cvedetector/11533 2024-11-28 11:01:07+00:00| seen| https://infosec.exchange/users/dragonjar/statuses/113560234590577110 2024-12-13 16:50:37+00:00| published-proof-of-concept|...

CVE-2024-52595 HTML Cleaner allows crafted scripts in special contexts like svg or math to pass through

lxmlhtmlclean is a project for HTML cleaning functionalities copied from lxml.html.clean. Prior to version 0.4.0, the HTML Parser in lxml does not properly handle context-switching for special HTML tags such as , and . This behavior deviates from how web browsers parse and interpret such tags...

CVE-2024-52595

The CVE-2024-52595 issue affects lxml_html_clean (a cleaning module related to lxml.html.clean). Before version 0.4.0, the HTML Parser mishandles context-switching for tags such as , , and , causing CSS-comment content to be treated inconsistently and potentially enabling XSS in untrusted HTML sa...