Unrated
An issue was discovered in the ammonia crate before 3.1.0 for Rust. XSS can occur because the parsing differences for HTML, SVG, and MathML are mishan...
CVE-2021-38193
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2021-38193 rust-ammonia Fixed in: 3.1.2-1
- Ubuntu UBUNTU-CVE-2021-38193 rust-ammonia
Original description The description as published by the source.
An issue was discovered in the ammonia crate before 3.1.0 for Rust. XSS can occur because the parsing differences for HTML, SVG, and MathML are mishandled, a similar issue to CVE-2020-26870.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory raw.githubusercontent.com
- patch rustsec.org