CVE-2026-26028 : 상세 정보

CVE-2026-26028

6.1
/
보통
0.03%V4
2026-05-20
20h16 +00:00
Cross-site Scripting
A03-Injection
Network
2026-07-23
12h10 +00:00
CVE.org
NVD
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

CryptPad is an end-to-end encrypted collaborative office suite. In versions prior to 2026.2.0, the HTML sanitizer in Diffmarked.js can be bypassed due to incomplete attribute filtering on restricted tags. The sanitizer validates only the src attribute of