CVE:CVE-2021-43818
CNNVD:CNNVD-202112-1050
lxml是lxml个人开发者的一个可与Python交互用于定位Html中元素的软件。
lxml 4.6.5之前版本存在注入漏洞，该漏洞源于HTML Cleaner允许某些精心制作的脚本内容以及使用数据URI嵌入的SVG文件中的脚本内容通过。
solution:Upgrade lxml lxml to a higher version than 4.6.5,and avoid the version (,4.6.5); Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade netapp solidfire to a higher version than -; Upgrade netapp solidfire_enterprise_sds to a higher version than -; Upgrade netapp hci_storage_node_firmware to a higher version than -; Upgrade oracle communications_cloud_native_core_binding_support_function to a higher version than 22.1.3,and avoid the version 22.1.3; Upgrade oracle communications_cloud_native_core_network_exposure_function to a higher version than 22.1.1,and avoid the version 22.1.1; Upgrade oracle communications_cloud_native_core_policy to a higher version than 22.2.0,and avoid the version 22.2.0; Upgrade oracle http_server to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle zfs_storage_appliance_kit to a higher version than 8.8,and avoid the version 8.8