medium6.1
CVE-2021-27671
An issue was discovered in the comrak crate before 0.9.1 for Rust.
Impact
An issue was discovered in the comrak crate before 0.9.1 for Rust. XSS can occur because the protection mechanism for data: and javascript: URIs is case-sensitive, allowing (for example) Data: to be used in an attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Comrak Project | Comrak | before 0.9.1 |