OWASP AntiSamy vulnerable to Cross-site Scripting

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2016-10006 · ADVISORY
• nahsra/antisamy · WEB
• nahsra/antisamy · PACKAGE
• web.archive.org/web/20170214025813/http://www.securityfocus.com/bid/95101 · WEB
• web.archive.org/web/20201207192053/http://www.securitytracker.com/id/1037532 · WEB
• securityfocus.com/bid/95101 · Third Party Advisory
• securitytracker.com/id/1037532 · Third Party Advisory

org.owasp.antisamy:antisamy のその他の脆弱性

• CVE-2024-23635中 6.1AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to 1.7.5, there is a potentia…
• CVE-2023-43643中 6.1AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to version 1.7.4, there is a …
• CVE-2022-29577中 6.1OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly e…
• CVE-2022-28367中 6.1OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly e…
• CVE-2021-35043中 6.1OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstra…