CVE-2021-23447

creationtimestamp| type| source ---|---|--- 2021-10-07 20:33:56+00:00| seen| https://t.me/cibsecurity/30177...

CVE-2021-23447 Cross-site Scripting (XSS)

This affects the package teddy before 0.5.9. A type confusion vulnerability can be used to bypass input sanitization when the model content is an array instead of a string...

CVE-2021-23447

The CVE-2021-23447 entry concerns the Teddy templating language prior to version 0.5.9. A type-confusion vulnerability allows bypassing input sanitization when the model content is an array (not a string), potentially enabling XSS-like behavior in affected renders. The mitigation is to upgrade Te...