CVE-2020-4070

    Dashboard / Vulnerabilities / CVE-2020-4070

    CVE-2020-4070

    Published: 22 Jun 2020Last Modified: 9 Jul 2026

    Summary:

    Details: In CSS Validator less than or equal to commit 54d68a1, there is a cross-site scripting vulnerability in handling URIs. A user would have to click on a specifically crafted validator link to trigger it. This has been patched in commit e5c09a9.

    References: https://github.com/w3c/css-validator/security/advisories/GHSA-wf36-7w73-rh8c, https://github.com/w3c/css-validator/commit/e5c09a9119167d3064db786d5f00d730b584a53b

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -e5c09a9119167d3064db786d5f00d730b584a53b

    Affected versions

    cssval-20190320

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2020-4070 | CVE-DB