lxml vulnerability

2014-05-2100:00:00

ubuntu.com

6.2 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.013 Low

EPSS

Percentile

85.8%

JSON

Releases

Ubuntu 14.04 ESM
Ubuntu 13.10
Ubuntu 12.04

Packages

lxml - pythonic binding for the libxml2 and libxslt libraries

Details

It was discovered that the lxml.html.clean module incorrectly stripped
control characters. An attacked could potentially exploit this to conduct
cross-site scripting (XSS) attacks.

OSVersionArchitecturePackageVersionFilename
Ubuntu14.04noarchpython-lxml< 3.3.3-1ubuntu0.1UNKNOWN
Ubuntu14.04noarchpython-lxml-dbg< 3.3.3-1ubuntu0.1UNKNOWN
Ubuntu14.04noarchpython3-lxml< 3.3.3-1ubuntu0.1UNKNOWN
Ubuntu14.04noarchpython3-lxml-dbg< 3.3.3-1ubuntu0.1UNKNOWN
Ubuntu13.10noarchpython-lxml< 3.2.0-1ubuntu0.1UNKNOWN
Ubuntu13.10noarchpython-lxml-dbg< 3.2.0-1ubuntu0.1UNKNOWN
Ubuntu13.10noarchpython3-lxml< 3.2.0-1ubuntu0.1UNKNOWN
Ubuntu13.10noarchpython3-lxml-dbg< 3.2.0-1ubuntu0.1UNKNOWN
Ubuntu12.04noarchpython-lxml< 2.3.2-1ubuntu0.2UNKNOWN
Ubuntu12.04noarchpython-lxml-dbg< 2.3.2-1ubuntu0.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	14.04	noarch	python-lxml	< 3.3.3-1ubuntu0.1	UNKNOWN
Ubuntu	14.04	noarch	python-lxml-dbg	< 3.3.3-1ubuntu0.1	UNKNOWN
Ubuntu	14.04	noarch	python3-lxml	< 3.3.3-1ubuntu0.1	UNKNOWN
Ubuntu	14.04	noarch	python3-lxml-dbg	< 3.3.3-1ubuntu0.1	UNKNOWN
Ubuntu	13.10	noarch	python-lxml	< 3.2.0-1ubuntu0.1	UNKNOWN
Ubuntu	13.10	noarch	python-lxml-dbg	< 3.2.0-1ubuntu0.1	UNKNOWN
Ubuntu	13.10	noarch	python3-lxml	< 3.2.0-1ubuntu0.1	UNKNOWN
Ubuntu	13.10	noarch	python3-lxml-dbg	< 3.2.0-1ubuntu0.1	UNKNOWN
Ubuntu	12.04	noarch	python-lxml	< 2.3.2-1ubuntu0.2	UNKNOWN
Ubuntu	12.04	noarch	python-lxml-dbg	< 2.3.2-1ubuntu0.2	UNKNOWN