Lucene search
+L

Cross-Site Scripting in "SVG Sanitizer" (svg_sanitizer)

🗓️ 12 May 2020 00:00:00Reported by TYPO3 AssociationType 
typo3
 typo3
🔗 typo3.org👁 22 Views

Cross-Site Scripting in "SVG Sanitizer" (svg_sanitizer) Slightly invalid or incomplete SVG markup is not correctly processed and thus not sanitized at all. Albeit the markup is not valid it is still evaluated in browsers can lead to Cross-Site Scripting

Related
ReporterTitlePublishedViews
Family
CNVD
TYPO3 SVG Sanitizer Component Cross-Site Scripting Vulnerability
14 May 202000:00
cnvd
CVE
CVE-2020-11070
13 May 202018:40
cve
Cvelist
CVE-2020-11070 Cross-Site Scripting in SVG Sanitizer
13 May 202018:40
cvelist
EUVD
EUVD-2020-0411
7 Oct 202500:30
euvd
Github Security Blog
Cross-Site Scripting in SVG Sanitizer
13 May 202022:17
github
NVD
CVE-2020-11070
13 May 202019:15
nvd
OSV
GHSA-59CF-M7V5-WH5W Cross-Site Scripting in SVG Sanitizer
13 May 202022:17
osv
Prion
Cross site scripting
13 May 202019:15
prion
RedhatCVE
CVE-2020-11070
22 May 202516:08
redhatcve
Veracode
Cross-Site Scripting (XSS)
14 May 202003:58
veracode
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

12 May 2020 00:00Current
1.5Low risk
Vulners AI Score1.5
EPSS0.0054
22