CVE-2020-27783

Advisory

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

[This affected versions has been limited. Please create a free account to view the full affected versions.]

Fixed versions

[This fixed versions has been limited. Please create a free account to view the full fixed versions.]

Vulnerability changelog

==================

Bugs fixed
----------

* A vulnerability (CVE-2020-27783) was discovered in the HTML Cleaner by Yaniv Nizry,
which allowed JavaScript to pass through. The cleaner now removes more sneaky
"style" content.

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27783
• https://bugzilla.redhat.com/show_bug.cgi?id=1901633
• https://www.debian.org/security/2020/dsa-4810
• https://lists.debian.org/debian-lts-announce/2020/12/msg00028.html
• https://lists.fedoraproject.org/archives/list/[email protected]/message/JKG67GPGTV23KADT4D4GK4RMHSO4CIQL/
• https://lists.fedoraproject.org/archives/list/[email protected]/message/TMHVKRUT22LVWNL3TB7HPSDHJT74Q3JK/
• https://advisory.checkmarx.net/advisory/CX-2020-4286
• https://security.netapp.com/advisory/ntap-20210521-0003/
• https://www.oracle.com//security-alerts/cpujul2021.html