Skip to content
OpenAdvisories
Medium ELSA-2021-1898 1 CVE

Moderate: python-lxml security update (Oracle Linux 8)

Published May 25, 2021 · Updated May 25, 2021

Ecosystem: Oracle Linux

Summary

[4.2.3-2]
- Security fix for CVE-2020-27783: mXSS due to the use of improper parser
Resolves: rhbz#1901633

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 python3-lxml 0:4.2.3-2.el8

Vulnerabilities 1

  • Medium 6.1
    CVE-2020-27783

    lxml vulnerable to Cross-site Scripting

    A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML…

    lxml lxml python-lxml lxml Debian Ubuntu Azure Linux Alpine PyPI