Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2020/02/24 5:33 p.m.105 views

XSS in Bleach when noscript and raw tag whitelisted

Impact A mutation XSS affects users calling bleach.clean with noscript and a raw tag see below in the allowed/whitelisted tags option. Patches v3.1.1 Workarounds modify bleach.clean calls to not whitelist noscript and one or more of the following raw tags: title textarea script style noembed...

6.1CVSS6.2AI score0.01674EPSS
SaveExploits1References12Affected Software1
Rows per page
Query Builder