SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

OVAL

py-bleach: mutation XSS vulnerability (CVE-2020-6802)

ID: oval:org.secpod.oval:def:1801687	Date: (C)2020-03-20 (M)2023-11-10
Class: PATCH	Family: unix

A mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option. Affected Versions: py-bleach <=3.1.0

Platform:

Alpine Linux 3.11

Product:

py3-bleach

Reference:

11298

CVE-2020-6802


30430



423868



247862



909



194603



282