简体中文

CVE-2026-26028：详情

CVE-2026-26028

6.1
/
中危
0.03%V4
2026-05-20
20h16 +00:00
Cross-site Scripting
A03-Injection
Network
2026-07-23
12h10 +00:00
CVE.org
NVD
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

CryptPad is an end-to-end encrypted collaborative office suite. In versions prior to 2026.2.0, the HTML sanitizer in Diffmarked.js can be bypassed due to incomplete attribute filtering on restricted tags. The sanitizer validates only the src attribute of