| Package | Affected versions | Patched versions |
|---|---|---|
| lxml | ≥ 1.2, < 4.6.2< 4.6.2 | 4.6.2 |
| lxml | ≥ 1.2, < 4.6.2 | 4.6.2 |
| communications offline mediation controller | = 12.0.0.3.0 | |
| zfs storage appliance kit | = 8.8 |
A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free