Cross-site Scripting in OWASP AntiSamy

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-29577 · ADVISORY
• nahsra/antisamy commit 32e2735 · WEB
• nahsra/antisamy · PACKAGE
• nahsra/antisamy release v1.6.7 · WEB
• oracle.com/security-alerts/cpujul2022.html · WEB

Lỗ hổng khác của org.owasp.antisamy:antisamy

• CVE-2024-23635TRUNG BÌNH 6.1AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to 1.7.5, there is a potentia…
• CVE-2023-43643TRUNG BÌNH 6.1AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to version 1.7.4, there is a …
• CVE-2022-28367TRUNG BÌNH 6.1OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly e…
• CVE-2021-35043TRUNG BÌNH 6.1OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstra…
• CVE-2017-14735TRUNG BÌNH 6.1OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of : to construct a javascript: URL.