GHSA-mjxr-4v3x-q3m4

ghsaUSosv

Improper Input Validation in sanitize-html

view advisory published 2021-05-06Licence: CC-BY-4.0

Apostrophe Technologies sanitize-html before 2.3.2 does not properly validate the hostnames set by the "allowedIframeHostnames" option when the "allowIframeRelativeUrls" is set to true, which allows attackers to bypass hostname whitelist for iframe element, related using an src value that starts with "/\\example.com".

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-26540US	medium5.3	1.75% (78th)	—	2021-02-08
Apostrophe Technologies sanitize-html before 2.3.2 does not properly validate the hostnames set by the "allowedIframeHostnames" option when the "allowIframeRelativeUrls" is set to…

references

External citations — patches, advisories, analysis.

https://advisory.checkmarx.net/advisory/CX-2021-4309WEB
https://github.com/apostrophecms/sanitize-html/blob/main/CHANGELOG.md#232-2021-01-26WEB
https://github.com/apostrophecms/sanitize-html/pull/460WEB
https://nvd.nist.gov/vuln/detail/CVE-2021-26540ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan