1. Home
  2. Security Advisories
  3. Ubuntu
  4. USN-4896-1

[USN-4896-1] lxml vulnerability

Severity Medium
Affected Packages 11
CVEs 1
Info Packages Vulnerabilities

lxml could allow cross-site scripting (XSS) attacks.

It was discovered that lxml incorrectly handled certain HTML attributes. A
remote attacker could possibly use this issue to perform cross-site
scripting (XSS) attacks.

Package Affected Version
pkg:deb/ubuntu/python3-lxml?distro=xenial < 3.5.0-1ubuntu0.4
pkg:deb/ubuntu/python3-lxml?distro=groovy < 4.5.2-1ubuntu0.4
pkg:deb/ubuntu/python3-lxml?distro=focal < 4.5.0-1ubuntu0.3
pkg:deb/ubuntu/python3-lxml?distro=bionic < 4.2.1-1ubuntu0.4
pkg:deb/ubuntu/python-lxml?distro=xenial < 3.5.0-1ubuntu0.4
pkg:deb/ubuntu/python-lxml?distro=focal < 4.5.0-1ubuntu0.3
pkg:deb/ubuntu/python-lxml?distro=bionic < 4.2.1-1ubuntu0.4
pkg:deb/ubuntu/python-lxml-doc?distro=xenial < 3.5.0-1ubuntu0.4
pkg:deb/ubuntu/python-lxml-doc?distro=groovy < 4.5.2-1ubuntu0.4
pkg:deb/ubuntu/python-lxml-doc?distro=focal < 4.5.0-1ubuntu0.3
pkg:deb/ubuntu/python-lxml-doc?distro=bionic < 4.2.1-1ubuntu0.4
ID
USN-4896-1
Severity
medium
URL
https://ubuntu.com/security/notices/USN-4896-1
Published
2021-03-30T16:24:59
(3 years ago)
Modified
2021-03-30T16:24:59
(3 years ago)
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:deb/ubuntu/python3-lxml?distro=xenial ubuntu python3-lxml < 3.5.0-1ubuntu0.4 xenial
Affected pkg:deb/ubuntu/python3-lxml?distro=groovy ubuntu python3-lxml < 4.5.2-1ubuntu0.4 groovy
Affected pkg:deb/ubuntu/python3-lxml?distro=focal ubuntu python3-lxml < 4.5.0-1ubuntu0.3 focal
Affected pkg:deb/ubuntu/python3-lxml?distro=bionic ubuntu python3-lxml < 4.2.1-1ubuntu0.4 bionic
Affected pkg:deb/ubuntu/python-lxml?distro=xenial ubuntu python-lxml < 3.5.0-1ubuntu0.4 xenial
Affected pkg:deb/ubuntu/python-lxml?distro=focal ubuntu python-lxml < 4.5.0-1ubuntu0.3 focal
Affected pkg:deb/ubuntu/python-lxml?distro=bionic ubuntu python-lxml < 4.2.1-1ubuntu0.4 bionic
Affected pkg:deb/ubuntu/python-lxml-doc?distro=xenial ubuntu python-lxml-doc < 3.5.0-1ubuntu0.4 xenial
Affected pkg:deb/ubuntu/python-lxml-doc?distro=groovy ubuntu python-lxml-doc < 4.5.2-1ubuntu0.4 groovy
Affected pkg:deb/ubuntu/python-lxml-doc?distro=focal ubuntu python-lxml-doc < 4.5.0-1ubuntu0.3 focal
Affected pkg:deb/ubuntu/python-lxml-doc?distro=bionic ubuntu python-lxml-doc < 4.2.1-1ubuntu0.4 bionic
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date