Beveiligingsadvies

CVE-2021-27671

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-02-25 00:33:48
Laatst bijgewerkt 2024-08-03 21:26:10
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

An issue was discovered in the comrak crate before 0.9.1 for Rust. XSS can occur because the protection mechanism for data: and javascript: URIs is case-sensitive, allowing (for example) Data: to be used in an attack.