Cross-site Scripting in OWASP AntiSamy

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-28367 · ADVISORY
• nahsra/antisamy commit 0199e7e · WEB
• nahsra/antisamy · PACKAGE
• nahsra/antisamy release v1.6.6 · WEB

org.owasp.antisamy:antisamy의 다른 취약점

• CVE-2024-23635보통 6.1AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to 1.7.5, there is a potentia…
• CVE-2023-43643보통 6.1AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to version 1.7.4, there is a …
• CVE-2022-29577보통 6.1OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly e…
• CVE-2021-35043보통 6.1OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstra…
• CVE-2017-14735보통 6.1OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of : to construct a javascript: URL.