rrrene html_sanitize_ex 0.3.1/1.5.2 HTML5 Scrubber HtmlSanitizeEx.html5 redirect

Summaryinfo

A vulnerability described as problematic has been identified in rrrene html_sanitize_ex 0.3.1/1.5.2. Affected by this vulnerability is an unknown functionality of the file HtmlSanitizeEx.html5 of the component HTML5 Scrubber. Executing a manipulation can lead to redirect. This vulnerability is registered as CVE-2026-66829. It is possible to launch the attack remotely. No exploit is available.

Detailsinfo

A vulnerability classified as problematic was found in rrrene html_sanitize_ex 0.3.1/1.5.2. This vulnerability affects an unknown code block of the file HtmlSanitizeEx.html5 of the component HTML5 Scrubber. The manipulation with an unknown input leads to a redirect vulnerability. The CWE definition for the vulnerability is CWE-601. A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks. As an impact it is known to affect integrity. CVE summarizes:

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows a remote attacker to force visitors of a page to navigate to a site of the attacker's choosing via a <meta http-equiv="refresh"> element in sanitized HTML. HtmlSanitizeEx.html5/1 keeps attacker-supplied <meta> elements in its output. A meta element acts on the whole document rather than on the fragment it was embedded in, so it can also declare document-wide directives such as Content-Security-Policy. This is not cross-site scripting. Browsers do not navigate a meta refresh to a javascript: URL, so the uppercase JAVASCRIPT: filter bypass yields no script execution and none was demonstrated. This issue affects html_sanitize_ex: from 0.3.1 before 1.5.3.

The advisory is available at github.com. This vulnerability was named CVE-2026-66829 since 08/06/2026. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Successful exploitation requires user interaction by the victim. Technical details are known, but there is no available exploit. This vulnerability is assigned to T1204.001 by the MITRE ATT&CK project.

Upgrading to version 1.5.3 eliminates this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• rrrene

Name

• html_sanitize_ex

Version

• 0.3.1
• 1.5.2

Website

• Product: https://github.com/rrrene/html_sanitize_ex/

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion