 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| CVE ID: | CVE-2021-23980 |
| Description: | A mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags style, title, noscript, script, textarea, noframes, iframe, or xmp in allowed tags the keyword argument strip_comments=False Note: none of the above tags are in the default allowed tags and strip_comments defaults to True. |
| Test IDs: | 1.3.6.1.4.1.25623.1.1.10.2021.0260 1.3.6.1.4.1.25623.1.0.892620 1.3.6.1.4.1.25623.1.0.704892 |
| Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2021-23980 https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2021-23980 https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2021-23980 https://github.com/mozilla/bleach/security/advisories/GHSA-vv2x-vrpj-qqpq https://github.com/mozilla/bleach/security/advisories/GHSA-vv2x-vrpj-qqpq |