Lucene search
GoogleOSV:GHSA-XMR7-V725-2JJRHistoryAug 25, 2021 - 8:52 p.m.
Cross site scripting in comrak
2021-08-2520:52:12
Google
osv.dev
5
0.001 Low
EPSS
Percentile
33.8%
An issue was discovered in the comrak crate before 0.9.1 for Rust. Cross site scripting (XSS) can occur because the protection mechanism for data: and javascript: URIs is case-sensitive, allowing (for example) Data: to be used in an attack.
Related
cvelist
cvelist
CVE-2021-27671
2021-02-25 00:33:48
rustsec
rustsec
XSS in `comrak`
2021-02-21 12:00:00
osv
osv
XSS in `comrak`
2021-02-21 12:00:00
CVE-2021-27671
2021-02-25 01:15:13
nvd
nvd
CVE-2021-27671
2021-02-25 01:15:13
cve
cve
CVE-2021-27671
2021-02-25 01:15:13
prion
prion
Design/Logic Flaw
2021-02-25 01:15:00
github
github
Cross site scripting in comrak
2021-08-25 20:52:12