Lucene search
RustsecRUSTSEC-2021-0026HistoryFeb 21, 2021 - 12:00 p.m.
XSS in `comrak`
2021-02-2112:00:00
rustsec.org
5
0.001 Low
EPSS
Percentile
33.8%
The comrak we were matching unsafe URL prefixes, such as data: or javascript: , in a case-sensitive manner. This meant prefixes like Data: were untouched.
Related
osv
osv
Cross site scripting in comrak
2021-08-25 20:52:12
XSS in `comrak`
2021-02-21 12:00:00
CVE-2021-27671
2021-02-25 01:15:13
cvelist
cvelist
CVE-2021-27671
2021-02-25 00:33:48
nvd
nvd
CVE-2021-27671
2021-02-25 01:15:13
cve
cve
CVE-2021-27671
2021-02-25 01:15:13
prion
prion
Design/Logic Flaw
2021-02-25 01:15:00
github
github
Cross site scripting in comrak
2021-08-25 20:52:12