XSS in Htmlsanitizer Project
CVE-2023-44390
HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. The vulnerability occurs in configurations where foreign content is allowed, i.e. either `svg` or `math` are in the list of allowed elements. In the case an application sanitizes user input with a vulnerable configuration, an attacker could bypass the sanitization and inject arbitrary HTML, including JavaScript code. Note that in the default configuration the vulnerability is not present. The vulnerability has been fixed in versions 8.0.723 and 8.1.722-beta (preview version).
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.004 (29.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.
Affected products
- Htmlsanitizer_project Htmlsanitizer — versions 8.1.719
- Mganss Htmlsanitizer — versions < 8.0.723, >= 8.1.0-beta, < 8.1.722-beta
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM, Vendor Advisory)
- security-advisories@github.com (Patch, x_refsource_MISC)
Frequently asked questions
- What is CVE-2023-44390?
- CVE-2023-44390 is a medium-severity vulnerability in Htmlsanitizer Project, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2023-10-05.
- How severe is CVE-2023-44390?
- Medium severity. CVSS v3 base score is 6.1 out of 10.