CVE:CVE-2021-23648
CNNVD:CNNVD-202203-1553
Braintree sanitize-url是美国Braintree公司的一种开源的网址清理。
Braintree sanitize-url 存在跨站脚本漏洞，该漏洞源于 sanitizeUrl 函数中的清理不当。该漏洞影响以下产品：sanitize-url 6.0.0 之前的版本。
solution:Upgrade paypal braintree/sanitize-url to a higher version than 6.0.0,and avoid the version (,6.0.0); Upgrade fedoraproject fedora to a higher version than 34,35,36,and avoid the version 34,35,36