Description (CNA)
DOMPurify before 3.4.0 contains a logic error in the ADD_TAGS function where short-circuit evaluation allows forbidden tags to bypass FORBID_TAGS restrictions. Attackers can craft input containing tags listed in FORBID_TAGS that are also added via ADD_TAGS function, causing them to be retained in sanitized output.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| cure53 / DOMPurify | affected 0 before 3.4.0; unaffected 3.4.0 |
CWE
CWE-697
References
- https://github.com/cure53/DOMPurify/security/advisories/GHSA-39q2-94rc-95cp
- https://www.vulncheck.com/advisories/dompurify-before-add-tags-function-bypasses-forbid-tags
ADP enrichment
No English description supplied.
No references supplied.