Lucene search
GoogleOSV:CVE-2019-10772HistoryDec 11, 2019 - 4:15 p.m.
CVE-2019-10772
2019-12-1116:15:10
Google
osv.dev
2
It is possible to bypass enshrined/svg-sanitize before 0.13.1 using the “xlink:href” attribute due to mishandling of the xlink namespace by the sanitizer.
Related
cvelist
cvelist
CVE-2019-10772
2019-12-11 15:23:04
veracode
veracode
Cross-Site Scripting (XSS)
2019-12-12 05:45:25
osv
osv
Sanitizer bypass in svg-sanitizer
2020-02-27 20:36:29
prion
prion
Design/Logic Flaw
2019-12-11 16:15:00
nvd
nvd
CVE-2019-10772
2019-12-11 16:15:10
github
github
Sanitizer bypass in svg-sanitizer
2020-02-27 20:36:29
cve
cve
CVE-2019-10772
2019-12-11 16:15:10