Cure53 DOMPurify 0.8.8

CPE Details

Cure53 DOMPurify 0.8.8
cure53
dompurify
0.8.8
2019-09-24
11h40 +00:00
2019-09-24
11h40 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:cure53:dompurify:0.8.8:*:*:*:*:*:*:*

Informations

Vendor

cure53

Product

dompurify

Version

0.8.8

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2019-25155 2023-10-30 23h00 +00:00 DOMPurify before 1.0.11 allows reverse tabnabbing in demos/hooks-target-blank-demo.html because links lack a 'rel="noopener noreferrer"' attribute.
6.1
Medium
CVE-2020-26870 2020-10-07 13h50 +00:00 Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree, and a namespace can change from HTML to MathML, as demonstrated by nesting of FORM elements.
6.1
Medium
CVE-2019-16728 2019-09-24 02h02 +00:00 DOMPurify before 2.0.1 allows XSS because of innerHTML mutation XSS (mXSS) for an SVG element or a MATH element, as demonstrated by Chrome and Safari.
6.1
Medium