CVE-2021-27671

creationtimestamp| type| source ---|---|--- 2021-02-25 07:37:25+00:00| seen| https://t.me/cibsecurity/24120...

CVE-2021-27671

The CVE-2021-27671 issue affects the comrak crate for Rust (pre-0.9.1). The root cause is a case-sensitive protection check for data: and javascript: URLs, allowing data: URLs to bypass the guard and enable cross-site scripting (XSS). This is described consistently across sources (NVD entry and R...