CVE-2020-6817

7.5HIGH

bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to bleach.clean with an allowed tag with an allowed style attribute are vulnerable

发布于: 2/16/2023更新于: 3/19/2025
在NVD查看在MITRE查看

描述

bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to bleach.clean with an allowed tag with an allowed style attribute are vulnerable to ReDoS. For example, bleach.clean(..., attributes={'a': ['style']}).

AI分析AI驱动

受影响产品

mozillableach

参考资料