Lucene search
GoogleOSV:GHSA-5F38-9JW2-6R6HHistoryOct 12, 2021 - 4:22 p.m.
Cross-site Scripting in teddy
2021-10-1216:22:04
Google
osv.dev
12
cross-site scripting
teddy
templating language
input sanitization
type confusion vulnerability
software
EPSS
0.001
Percentile
43.8%
Teddy is a readable and easy to learn templating language. This affects the package teddy before 0.5.9. A type confusion vulnerability can be used to bypass input sanitization when the model content is an array (instead of a string).
Related
cve
cve
CVE-2021-23447
2021-10-07 17:15:08
osv
osv
CVE-2021-23447
2021-10-07 17:15:08
prion
prion
Type confusion
2021-10-07 17:15:00
veracode
veracode
Cross-Site Scripting (XSS)
2021-10-08 07:58:47
nvd
nvd
CVE-2021-23447
2021-10-07 17:15:08
github
github
Cross-site Scripting in teddy
2021-10-12 16:22:04
cvelist
cvelist
CVE-2021-23447 Cross-site Scripting (XSS)
2021-10-07 16:40:12