GitHub Advisoryadvisory · NuGet

GHSA-8j9v-h2vp-2hhv XSS in HtmlSanitizer

LOW Published 2021-01-04 Modified 2021-01-07 Official page ↗
Aliases
CVE-2020-26293
Ecosystem
NuGet
Packages
HtmlSanitizer
Severity
Low
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N
Weaknesses
CWE-74, CWE-79
Reviewed
2021-01-04

Affected packages

• NuGet HtmlSanitizer: < 5.0.372 → fixed in 5.0.372

Description

Impact If you have explicitly allowed the `` tag, an attacker could craft HTML that includes script after passing through the sanitizer. The default settings disallow the `` tag so there is no risk if you have not explicitly allowed the `` tag. Patches The problem has been fixed in version 5.0.372. Workarounds Remove the `` tag from the set of allowed tags. For more information If you have any questions or comments about this advisory open an issue in https://github.com/mganss/HtmlSanitizer Credits This issue was discovered by Michal Bentkowski of Securitum.

Related

Alias · CVE (1)

  • CVE-2020-26293 HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. vulnerability

Weakness · CWE (2)

  • CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness
  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References