An issue was discovered in the comrak crate before 0.9.1 for Rust
published February 25, 2021
CVSS
—
EPSS
1%
Percentile
52.1
In the wild
Unconfirmed
What it is
An issue was discovered in the comrak crate before 0.9.1 for Rust. XSS can occur because the protection mechanism for data: and javascript: URIs is case-sensitive, allowing (for example) Data: to be used in an attack.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00686 · 52.1th percentile
Published
2021-02-25T00:33Z
EPSS history
Timeline
25 FEB 00:33Z
An issue was discovered in the comrak crate before 0.9.1 for Rust