CVE-2025-6498

概要

参考情報

• htacg/tidy-html5 · Exploit
• user-attachments/files · Exploit
• vuldb.com · Permissions Required
• vuldb.com · Third Party Advisory
• vuldb.com · Third Party Advisory

tidy のその他の脆弱性

• CVE-2021-33391緊急 9.8An issue in HTACG HTML Tidy v5.7.28 allows attacker to execute arbitrary code via the -g option of the CleanNode() function in gdoc.c.
• CVE-2017-17497高 7.5In Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial of service (Segmentation Fault), because th…
• CVE-2017-13692高 7.5In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault), as demonstrated b…
• CVE-2015-5523中 4.3The ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service (crash) via vectors involving …
• CVE-2015-5522中 6.8Heap-based buffer overflow in the ParseValue function in lexer.c in tidy before 4.9.31 allows remote attackers to cause a denial of service …