CVE Vulnerability

CVE-2020-26870

Cure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree, and a namespace can change from HTML to MathML, as demonstrated by nesting of FORM elements.

4.3 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

6.1 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://research.securitum.com/mutation-xss-via-mathml-mutation-dompurify-2-0-17-bypass/ Exploit Third Party Advisory
https://github.com/cure53/DOMPurify/commit/02724b8eb048dd219d6725b05c3000936f11d62d Patch Third Party Advisory
https://github.com/cure53/DOMPurify/compare/2.0.16...2.0.17 Patch Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/10/msg00029.html Mailing List Third Party Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-26870 Patch Vendor Advisory
https://www.oracle.com//security-alerts/cpujul2021.html Patch Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:cure53:dompurify:*:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_studio_2017:15.9:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_studio_2019:16.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_studio_2019:16.4:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_studio_2019:16.8:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_studio_2019:16.7:*:*:*:*:*:*:*
cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:*
Information

Published : 2020-10-07 04:15

Updated : 2022-04-27 06:49

NVD link : CVE-2020-26870

Mitre link : CVE-2020-26870

Products Affected

Microsoft

Visual Studio 2017

CWE
CWE-79