Bleach Security Vulnerabilities and Issues — Bleach CVE List

Lucene search

MozillaBleach

2 matches found

CVE•added 2020/03/24 10:15 p.m.•173 views

CVE-2020-6816

In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argument strip=False.

6.1CVSS5.9AI score0.00366EPSS

CVE•added 2020/03/24 10:15 p.m.•166 views

CVE-2020-6802

In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option.

6.1CVSS5.9AI score0.0075EPSS