Published: 24/03/2020 Updated: 07/11/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 384

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

In Mozilla Bleach prior to 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla bleach
fedoraproject fedora 30
fedoraproject fedora 31
fedoraproject fedora 32

It was reported that python-bleach, a whitelist-based HTML-sanitizing library, is prone to a mutation XSS vulnerability in bleachclean when noscript and one or more raw text tags were whitelisted For the stable distribution (buster), this problem has been fixed in version 311-0+deb10u1 We recommend that you upgrade your python-bleach packages ...

-python-tda-bug-hunt-new DEPENDENCY #bleach==301 VULNERABLE DEPENDENCY IN THE PACKAGE TREE #hellobluenove==20 VULNERABILITIES WS-2021-0011 CVE-2020-6817 CVE-2020-6816 CVE-2020-6802 DEPENDENCY #freeipa==481 VULNERABLE DEPENDENCY IN THE PACKAGE TREE #gssapi==182 VULNERABILITIES CVE-2019-14867 DEPENDENCY #freeipa==481 VULNERABLE DEPENDENCY IN THE PACKAGE TREE #gssapi=

Alternative robots parser module for Python

Robots Exclusion Standard Parser for Python The robotspy Python module implements a parser for robotstxt files The recommended class to use is robotsRobotsParser A thin facade robotsRobotFileParser can also be used as a substitute for urllibrobotparserRobotFileParser, available in the Python standard library The class robotsRobotFileParser exposes an API that is mostly

CWE-79 https://github.com/mozilla/bleach/security/advisories/GHSA-q65m-pv3f-wr5r https://www.checkmarx.com/blog/vulnerabilities-discovered-in-mozilla-bleach https://advisory.checkmarx.net/advisory/CX-2020-4276 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OCNLM2MGQTOLCIVVYS2Z5S7KOQJR5JC4/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/72R4VFFHDRSQMNT7IZU3X2755ZP4HGNI/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTULPQB7HVPPYWEYVNHJGDTSPVIDHIZX/https://nvd.nist.gov https://www.debian.org/security/2020/dsa-4636 https://github.com/andreburgaud/robotspy

CVE-2020-6802

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect