ZeroHour

CVE-2021-38193

PoC
CVSS 3.1
6.1 medium
EPSS
<1%p52
Published
()
Modified
Description

An issue was discovered in the ammonia crate before 3.1.0 for Rust. XSS can occur because the parsing differences for HTML, SVG, and MathML are mishandled, a similar issue to CVE-2020-26870.

Vendors
ammonia project
Products
ammonia
Weakness
CWE-79
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

In the news

No ingested article mentions this CVE yet.