OWASP HTML Sanitizer allows redirecting to an arbitrary URL when JavaScript is disabled

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2011-4457 · ADVISORY
• OWASP/java-html-sanitizer commit 2027d3d · WEB
• OWASP/java-html-sanitizer · PACKAGE
• OWASP/java-html-sanitizer · WEB
• OWASP/java-html-sanitizer · WEB
• code.google.com/p/owasp-java-html-sanitizer/wiki/CVE20114457 · WEB
• owasp-java-html-sanitizer.googlecode.com/svn/trunk/CHANGE_LOG.html · WEB

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer のその他の脆弱性

• CVE-2025-66021中 6.1OWASP Java HTML Sanitizer is a configureable HTML Sanitizer written in Java, allowing inclusion of HTML authored by third-parties in web app…
• CVE-2021-42575緊急 9.8The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.