CVE-2021-38193 | BDVDB-2026-158338 Detail

Description#

An issue was discovered in the ammonia crate before 3.1.0 for Rust. XSS can occur because the parsing differences for HTML, SVG, and MathML are mishandled, a similar issue to CVE-2020-26870.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://rustsec.org/advisories/RUSTSEC-2021-0074.html
https://raw.githubusercontent.com/rustsec/advisory-db/main/crates/ammonia/RUSTSEC-2021-0074.md

Exploit#

No public exploit known

History#

Version 12021-08-08Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.