CVE-2014-3146

Published: May 14, 2014Modified: May 6, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters in the link scheme to the clean_html function.

Affected (95)

Products: Lxml: Lxml

Lxml

1 product

Lxml

Configuration A

95 vulnerable

Vulnerable Software	Affected Versions
Lxml Lxml	Up to 3.3.4
Lxml Lxml	Version 0.5.1
Lxml Lxml	Version 0.5
Lxml Lxml	Version 0.6
Lxml Lxml	Version 0.7
Lxml Lxml	Version 0.8
Lxml Lxml	Version 0.9.1
Lxml Lxml	Version 0.9.2
Lxml Lxml	Version 0.9
Lxml Lxml	Version 1.0.1
Lxml Lxml	Version 1.0.2
Lxml Lxml	Version 1.0.3
Lxml Lxml	Version 1.0.4
Lxml Lxml	Version 1.0
Lxml Lxml	Version 1.1.1
Lxml Lxml	Version 1.1.2
Lxml Lxml	Version 1.1
Lxml Lxml	Version 1.2.1
Lxml Lxml	Version 1.2
Lxml Lxml	Version 1.3.1
Lxml Lxml	Version 1.3.2
Lxml Lxml	Version 1.3.3
Lxml Lxml	Version 1.3.4
Lxml Lxml	Version 1.3.5
Lxml Lxml	Version 1.3.6
Lxml Lxml	Version 1.3
Lxml Lxml	Version 2.0.10
Lxml Lxml	Version 2.0.11
Lxml Lxml	Version 2.0.1
Lxml Lxml	Version 2.0.2
Lxml Lxml	Version 2.0.3
Lxml Lxml	Version 2.0.4
Lxml Lxml	Version 2.0.5
Lxml Lxml	Version 2.0.6
Lxml Lxml	Version 2.0.7
Lxml Lxml	Version 2.0.8
Lxml Lxml	Version 2.0.9
Lxml Lxml	Version 2.0
Lxml Lxml	Version 2.1.1
Lxml Lxml	Version 2.1.2
Lxml Lxml	Version 2.1.3
Lxml Lxml	Version 2.1.4
Lxml Lxml	Version 2.1 alpha1
Lxml Lxml	Version 2.1 beta1
Lxml Lxml	Version 2.1 beta2
Lxml Lxml	Version 2.1 beta3
Lxml Lxml	Version 2.2.1
Lxml Lxml	Version 2.2.2
Lxml Lxml	Version 2.2.3
Lxml Lxml	Version 2.2.4
Lxml Lxml	Version 2.2.5
Lxml Lxml	Version 2.2.6
Lxml Lxml	Version 2.2.7
Lxml Lxml	Version 2.2.8
Lxml Lxml	Version 2.2
Lxml Lxml	Version 2.2 alpha1
Lxml Lxml	Version 2.2 beta1
Lxml Lxml	Version 2.2 beta2
Lxml Lxml	Version 2.2 beta3
Lxml Lxml	Version 2.2 beta4
Lxml Lxml	Version 2.3.1
Lxml Lxml	Version 2.3.2
Lxml Lxml	Version 2.3.3
Lxml Lxml	Version 2.3.4
Lxml Lxml	Version 2.3.5
Lxml Lxml	Version 2.3.6
Lxml Lxml	Version 2.3
Lxml Lxml	Version 2.3 alpha1
Lxml Lxml	Version 2.3 alpha2
Lxml Lxml	Version 2.3 beta1
Lxml Lxml	Version 3.0.1
Lxml Lxml	Version 3.0.2
Lxml Lxml	Version 3.0
Lxml Lxml	Version 3.0 alpha1
Lxml Lxml	Version 3.0 alpha2
Lxml Lxml	Version 3.0 beta1
Lxml Lxml	Version 3.1.0
Lxml Lxml	Version 3.1.1
Lxml Lxml	Version 3.1.2
Lxml Lxml	Version 3.1 beta1
Lxml Lxml	Version 3.2.0
Lxml Lxml	Version 3.2.1
Lxml Lxml	Version 3.2.2
Lxml Lxml	Version 3.2.3
Lxml Lxml	Version 3.2.4
Lxml Lxml	Version 3.2.5
Lxml Lxml	Version 3.3.0
Lxml Lxml	Version 3.3.0 beta1
Lxml Lxml	Version 3.3.0 beta2
Lxml Lxml	Version 3.3.0 beta3
Lxml Lxml	Version 3.3.0 beta4
Lxml Lxml	Version 3.3.0 beta5
Lxml Lxml	Version 3.3.1
Lxml Lxml	Version 3.3.2
Lxml Lxml	Version 3.3.3