Cross-site Scripting in OWASP AntiSamy

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-29577 · ADVISORY
• nahsra/antisamy commit 32e2735 · WEB
• nahsra/antisamy · PACKAGE
• nahsra/antisamy release v1.6.7 · WEB
• oracle.com/security-alerts/cpujul2022.html · WEB

org.owasp.antisamy:antisamy のその他の脆弱性

• CVE-2024-23635中 6.1AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to 1.7.5, there is a potentia…
• CVE-2023-43643中 6.1AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to version 1.7.4, there is a …
• CVE-2022-28367中 6.1OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly e…
• CVE-2021-35043中 6.1OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstra…
• CVE-2017-14735中 6.1OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of : to construct a javascript: URL.