Lucene search
GoogleOSV:GHSA-MM8J-9X84-M9CVHistoryJun 16, 2021 - 5:34 p.m.
Arbitrary code injection in json-sanitizer
2021-06-1617:34:18
Google
osv.dev
16
0.002 Low
EPSS
Percentile
64.8%
OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input. This allows an attacker to inject arbitrary HTML or XML into embedding documents.
Related
cve
cve
CVE-2021-23899
2021-01-13 16:15:14
veracode
veracode
Arbitrary Code Injection
2021-01-14 06:04:54
osv
osv
CVE-2021-23899
2021-01-13 16:15:14
nvd
nvd
CVE-2021-23899
2021-01-13 16:15:14
prion
prion
Design/Logic Flaw
2021-01-13 16:15:00
cvelist
cvelist
CVE-2021-23899
2021-01-13 15:49:56
github
github
Arbitrary code injection in json-sanitizer
2021-06-16 17:34:18