Lucene search
Veracode Vulnerability DatabaseVERACODE:22164HistoryDec 12, 2019 - 5:45 a.m.
Cross-Site Scripting (XSS)
2019-12-1205:45:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
41.4%
enshrined/svg-sanitize is vulnerable to cross-site scripting (XSS). The attack exists because it does not validate the attributes to be safe values before parsing in xlink:href, allowing an attacker to inject a malicious script through it.
| CPE | Name | Operator | Version |
|---|---|---|---|
| enshrined/svg-sanitize | le | 0.13.0 |
Related
cvelist
cvelist
CVE-2019-10772
2019-12-11 15:23:04
osv
osv
Sanitizer bypass in svg-sanitizer
2020-02-27 20:36:29
CVE-2019-10772
2019-12-11 16:15:10
prion
prion
Design/Logic Flaw
2019-12-11 16:15:00
nvd
nvd
CVE-2019-10772
2019-12-11 16:15:10
github
github
Sanitizer bypass in svg-sanitizer
2020-02-27 20:36:29
cve
cve
CVE-2019-10772
2019-12-11 16:15:10