Lucene search
GoogleOSV:CVE-2021-23445HistorySep 27, 2021 - 5:15 p.m.
CVE-2021-23445
2021-09-2717:15:08
Google
osv.dev
9
datatables.net
html escape entities
contents escaped
software
EPSS
0.002
Percentile
61.3%
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
References
cdn.datatables.net/1.11.3/
github.com/DataTables/Dist-DataTables/commit/59a8d3f8a3c1138ab08704e783bc52bfe88d7c9b
lists.debian.org/debian-lts-announce/2023/08/msg00018.html
snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1715371
snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1715376
snyk.io/vuln/SNYK-JS-DATATABLESNET-1540544
Related
openvas
openvas
Debian: Security Advisory (DLA-3529-1)
2023-08-16 00:00:00
Tenable Nessus < 10.3.1 Multiple Vulnerabilities (TNS-2022-20)
2022-11-11 00:00:00
Tenable Nessus < 10.5.0 Multiple Vulnerabilities (TNS-2023-09)
2023-03-07 00:00:00
debiancve
debiancve
CVE-2021-23445
2021-09-27 17:15:08
nvd
nvd
CVE-2021-23445
2021-09-27 17:15:08
cve
cve
CVE-2021-23445
2021-09-27 17:15:08
nessus
nessus
github
github
Cross site scripting in datatables.net
2021-09-29 17:11:28
osv
osv
Cross site scripting in datatables.net
2021-09-29 17:11:28
datatables.js - security update
2023-08-15 00:00:00
typo3
typo3
Cross-Site Scripting in extension "Bookdatabase" (extbookdatabase)
2022-02-15 00:00:00
redhatcve
redhatcve
CVE-2021-23445
2024-01-10 16:32:17
prion
prion
Code injection
2021-09-27 17:15:00
vulnrichment
vulnrichment
CVE-2021-23445 Cross-site Scripting (XSS)
2021-09-27 00:00:00
cvelist
cvelist
CVE-2021-23445 Cross-site Scripting (XSS)
2021-09-27 00:00:00
ubuntucve
ubuntucve
CVE-2021-23445
2021-09-27 00:00:00
debian
debian
[SECURITY] [DLA 3529-1] datatables.js security update
2023-08-15 14:10:04
redhat
redhat
