Mozilla Bleach 3.2.3

CPE Details

Mozilla Bleach 3.2.3
mozilla
bleach
3.2.3
2023-02-24
14h10 +00:00
2023-07-14
12h08 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:mozilla:bleach:3.2.3:*:*:*:*:*:*:*

Informations

Vendor

mozilla

Product

bleach

Version

3.2.3

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2021-23980 2023-02-16 00h00 +00:00 A mutation XSS affects users calling bleach.clean with all of: svg or math in the allowed tags p or br in allowed tags style, title, noscript, script, textarea, noframes, iframe, or xmp in allowed tags the keyword argument strip_comments=False Note: none of the above tags are in the default allowed tags and strip_comments defaults to True.
6.1
Medium
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.