PT-2017-10386 · Html5Lib+1 · Html5Lib+1
CVSS v3.1
6.1
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
html5lib versions prior to 0.99999999
Description
The issue concerns the serializer in html5lib, which might allow remote attackers to conduct cross-site scripting (XSS) attacks. This is due to the mishandling of special characters in attribute values.
Recommendations
For versions prior to 0.99999999, update to version 0.99999999 or later to resolve the issue.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Html5Lib