PT-2023-8924 · Sanitize+2 · Sanitize+2

Cure53 · Published 2023-07-06 · Updated 2024-04-24 · CVE-2023-36823

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sanitize versions 3.0.0 through 6.0.2

Description The issue is related to the Sanitize HTML and CSS sanitizer, which can be exploited by an attacker using carefully crafted input to sneak arbitrary HTML and CSS through the sanitizer. This could result in cross-site scripting or other undesired behavior when the malicious HTML and CSS are rendered in a browser. The exploitation is possible when Sanitize is configured to use the built-in "relaxed" config or when using a custom config that allows style elements and one or more CSS at-rules.

Recommendations For Sanitize versions 3.0.0 through 6.0.2, consider the following:

• Upgrade to Sanitize version 6.0.2 or later, which performs additional escaping of CSS in style element content.
• Use a Sanitize config that doesn't allow style elements.
• Use a Sanitize config that doesn't allow CSS at-rules.
• Manually escape the character sequence </ as </ in style element content.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2024-02630

CVE-2023-36823

DLA-3652-1

DSA-5616-1

GHSA-F5WW-CQ3M-Q3G7

USN-6748-1

Affected Products

Linuxmint

Sanitize

Ubuntu

References · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/36xxx/CVE-2023-36823.json · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sanitize/CVE-2023-36823.yml · Exploit
• https://github.com/rgrove/sanitize/commit/76ed46e6dc70820f38efe27de8dabd54dddb5220 · Patch
• https://github.com/rgrove/sanitize/security/advisories/GHSA-f5ww-cq3m-q3g7 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5616-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-36823 · Security Note
• https://osv.dev/vulnerability/USN-6748-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3652-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-02630 · Security Note
• https://osv.dev/vulnerability/CVE-2023-36823 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-23627 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-36823 · Security Note
• https://ubuntu.com/security/notices/USN-6748-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-36823 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-36823 · Vendor Advisory