Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Comrak Project Subscribe
Filtered by product Comrak
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-38186 1 Comrak Project 1 Comrak 2021-08-14 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered in the comrak crate before 0.10.1 for Rust. It mishandles & characters, leading to XSS via &# HTML entities.
CVE-2021-27671 1 Comrak Project 1 Comrak 2021-03-02 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered in the comrak crate before 0.9.1 for Rust. XSS can occur because the protection mechanism for data: and javascript: URIs is case-sensitive, allowing (for example) Data: to be used in an attack.