Lucene search
Veracode Vulnerability DatabaseVERACODE:29301HistoryFeb 09, 2021 - 2:31 a.m.
Hostname Validation Bypass
2021-02-0902:31:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
hostname validation
bypass
sanitize-html
url parser
idna attack
internationalized domain name
EPSS
0.001
Percentile
49.3%
sanitize-html is vulnerable to hostname validation bypass. The package does not properly validate the iframe hostname in URL parser, allowing an IDNA (Internationalized Domain Name) iframe attack.
Related
nodejs
nodejs
Improper Input Validation
2021-05-06 16:14:51
prion
prion
Design/Logic Flaw
2021-02-08 17:15:00
osv
osv
CVE-2021-26539
2021-02-08 17:15:13
Improper Input Validation in sanitize-html
2021-05-06 16:10:05
debiancve
debiancve
CVE-2021-26539
2021-02-08 17:15:13
redhatcve
redhatcve
CVE-2021-26539
2021-02-24 14:04:11
nvd
nvd
CVE-2021-26539
2021-02-08 17:15:13
cvelist
cvelist
CVE-2021-26539
2021-02-08 16:16:06
cve
cve
CVE-2021-26539
2021-02-08 17:15:13
github
github
Improper Input Validation in sanitize-html
2021-05-06 16:10:05
redhat
redhat