Lucene search
GitHub Advisory DatabaseGHSA-3PQG-4RQG-PG9GHistoryApr 23, 2022 - 12:03 a.m.
Cross-site Scripting in OWASP AntiSamy
2022-04-2300:03:04
CWE-79
GitHub Advisory Database
github.com
5
0.001 Low
EPSS
Percentile
25.9%
OWASP AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets (CSS) content.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.owasp.antisamy:antisamy | lt | 1.6.6 |
Related
veracode
veracode
Cross-site Scripting (XSS)
2022-04-22 08:29:13
debiancve
debiancve
CVE-2022-28367
2022-04-21 23:15:00
CVE-2022-29577
2022-04-21 23:15:00
osv
osv
CVE-2022-28367
2022-04-21 23:15:00
Cross-site Scripting in OWASP AntiSamy
2022-04-23 00:03:04
Cross-site Scripting in OWASP AntiSamy
2022-04-23 00:03:04
cvelist
cvelist
CVE-2022-28367
2022-04-21 22:42:14
CVE-2022-29577
2022-04-21 22:42:51
prion
prion
Design/Logic Flaw
2022-04-21 23:15:00
Design/Logic Flaw
2022-04-21 23:15:00
cve
cve
CVE-2022-28367
2022-04-21 23:15:00
CVE-2022-29577
2022-04-21 23:15:00
ubuntucve
ubuntucve
CVE-2022-28367
2022-04-21 00:00:00
CVE-2022-29577
2022-04-21 00:00:00
ibm
ibm
Security Bulletin: There are several vulnerabilities in AntiSamy used by IBM Maximo Asset Management (CVE-2022-28367, CVE-2022-29577)
2023-06-05 13:43:15
github
github
Cross-site Scripting in OWASP AntiSamy
2022-04-23 00:03:04