Skip to content
Sign in
Not rated

CVE-2020-6816 In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted…

Description

In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argument strip=False.

Affected products and versions

Product Affected versions Fixed in
Mozilla Bleach 3.11 earliest → 3.11 No fix stated

Other CVEs of Mozilla Bleach

The 2 CVEs of Mozilla Bleach →
CVE-2020-6802 In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the… Not rated
Track this CVE