Lucene search
MitreCVELIST:CVE-2022-28367HistoryApr 21, 2022 - 10:42 p.m.
CVE-2022-28367
2022-04-2122:42:14
mitre
www.cve.org
0.001 Low
EPSS
Percentile
26.3%
OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets (CSS) content.
Related
debiancve
debiancve
CVE-2022-28367
2022-04-21 23:15:10
CVE-2022-29577
2022-04-21 23:15:10
veracode
veracode
Cross-site Scripting (XSS)
2022-04-22 08:29:13
nvd
nvd
CVE-2022-28367
2022-04-21 23:15:10
CVE-2022-29577
2022-04-21 23:15:10
prion
prion
Design/Logic Flaw
2022-04-21 23:15:00
Design/Logic Flaw
2022-04-21 23:15:00
osv
osv
Cross-site Scripting in OWASP AntiSamy
2022-04-23 00:03:04
CVE-2022-28367
2022-04-21 23:15:00
Cross-site Scripting in OWASP AntiSamy
2022-04-23 00:03:04
cve
cve
CVE-2022-28367
2022-04-21 23:15:10
CVE-2022-29577
2022-04-21 23:15:10
ubuntucve
ubuntucve
CVE-2022-28367
2022-04-21 00:00:00
CVE-2022-29577
2022-04-21 00:00:00
github
github
Cross-site Scripting in OWASP AntiSamy
2022-04-23 00:03:04
Cross-site Scripting in OWASP AntiSamy
2022-04-23 00:03:04
ibm
ibm
Security Bulletin: There are several vulnerabilities in AntiSamy used by IBM Maximo Asset Management (CVE-2022-28367, CVE-2022-29577)
2023-06-05 13:43:15
cvelist
cvelist
CVE-2022-29577
2022-04-21 22:42:51