Lucene search
Veracode Vulnerability DatabaseVERACODE:22839HistoryMar 31, 2020 - 6:36 a.m.
Regular Expression Denial-of-Service (ReDoS)
2020-03-3106:36:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
bleach is vulnerable to regular expression denial of service (ReDoS). The vulnerability exists when parsing style attributes through sanitize_css.
Related
github
github
regular expression denial-of-service (ReDoS) in Bleach
2020-03-30 19:45:56
nessus
nessus
FreeBSD : py-bleach -- regular expression denial-of-service (4c52ec3c-86f3-11ea-b5b4-641c67a117d8)
2020-04-27 00:00:00
Debian DLA-2167-1 : python-bleach security update
2020-04-02 00:00:00
Fedora 31 : python-bleach (2020-e1fa96c506)
2020-04-30 00:00:00
osv
osv
regular expression denial-of-service (ReDoS) in Bleach
2020-03-30 19:45:56
python-bleach - security update
2020-04-01 00:00:00
PYSEC-2020-340
2020-03-30 19:45:00
debian
debian
[SECURITY] [DLA 2167-1] python-bleach security update
2020-04-01 17:53:31
cve
cve
CVE-2020-6817
2023-02-16 22:15:10
redhatcve
redhatcve
CVE-2020-6817
2022-05-21 00:05:30
ubuntucve
ubuntucve
CVE-2020-6817
2023-02-16 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-2167-1)
2020-04-02 00:00:00
Fedora: Security Advisory for python-bleach (FEDORA-2020-827b677e15)
2020-04-30 00:00:00
Fedora: Security Advisory for python-bleach (FEDORA-2020-e9c8bdd1e3)
2020-05-02 00:00:00
debiancve
debiancve
CVE-2020-6817
2023-02-16 22:15:10
prion
prion
Cross site scripting
2023-02-16 22:15:00
freebsd
freebsd
py-bleach -- regular expression denial-of-service
2019-03-09 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: python-bleach-3.1.4-2.fc32
2020-05-01 04:07:36
[SECURITY] Fedora 31 Update: python-bleach-3.1.4-2.fc31
2020-04-30 03:44:15
[SECURITY] Fedora 30 Update: python-bleach-3.1.4-2.fc30
2020-04-30 02:51:57
mageia
mageia
Updated python-bleach packages fix security vulnerability
2020-04-20 17:02:32
suse
suse
Security update for python-bleach (important)
2021-04-18 00:00:00
Security update for python-bleach (important)
2021-04-14 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Related for VERACODE:22839