CVEvulnerability

CVE-2026-76203

5.1 MEDIUM Published 2026-08-19 Modified 2026-09-01 Official page ↗

Status: Deferred
Published: 2026-08-19
Last modified: 2026-09-01
Assigner: 4daa8cea-433a-44bd-9456-53b127fc289a
CVSS 4.0 (4daa8cea-433a-44bd-9456-53b127fc289a): 5.1 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weaknesses: CWE-180

Description

Incorrect Behavior Order: Validate Before Canonicalize in the report theme CSS sanitizer in maalfer Pentestify 1.2.0 through 2.3.2 allows an authenticated user to force outbound HTTP requests from other users' browsers, disclosing their IP address and User-Agent, via CSS hex escapes that reconstruct the url() function and evade the sanitizer blocklist

Weakness · CWE (1)

CWE-180 Incorrect Behavior Order: Validate Before Canonicalize weakness

References

https://github.com/ccyl13/Pentestify/commit/1ed1aadadb02e959af470aac9958462048f7f5f5 github.com
https://secur0.com/en/cna/cve-list/cve-2026-76203-css-sanitizer-bypass-pentestify-report-themes secur0.com

CVE-2026-76203

Description

Related

Weakness · CWE (1)

References