com.microsoftopentechnologies:azure-slave (>=0.1.0, <=0.3.0), com.microsoftopentechnologies:windows-azure-storage-plugin (0.3.1) +65 more potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (r173)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version r173 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

com.breuninger.boot:core (>=3.0.0.release, <=3.2.1.release), com.breuninger.boot:example-app (>=3.0.3.release, <=3.2.1.release) +3 more potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20190503.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20190503.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: - com.breuninger.boot:co...

com.google.closure:doclet (>=1.1.0, <=1.2.0), com.googlecode.owasp-java-html-sanitizer:html-types (20160827.1) +1 more potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20160827.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20160827.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

com.capgemini.mrchecker:mrchecker-cli-module (>=1.0.1, <=1.0.5), com.capgemini.mrchecker:mrchecker-core-module (>=5.7.0.1, <=5.7.0.7) +183 more potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20191001.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20191001.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

com.googlecode.owasp-java-html-sanitizer:html-types (20160614.1) potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20160614.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20160614.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

com.github.spacialcircumstances.gradle-cucumber-reporting:com.github.spacialcircumstances.gradle-cucumber-reporting.gradle.plugin (>=0.0.1, <=0.0.11), com.googlecode.owasp-java-html-sanitizer:html-types (20170515.1) +14 more potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (20170515.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version 20170515.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer and may be impacted: -...

CVE-2021-42575

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

CVE-2021-42575

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

br.com.jarch:jarch-apt (>=20.7.0, <=25.12.0), br.com.jarch:jarch-bpm (>=24.2.0, <=25.12.0) +383 more potentially affected by CVE-2021-42575 via com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer (>=r136, <=20200713.1)

com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer MAVEN version =r136, =20.7.0, =24.2.0, =20.7.0, =23.1.0, =24.2.0, =3.0.0.release, =3.0.3.release, =1.0.1, =4.12.1.1, =2.2.1, =7.2.0.1, =1.2.0, =1.2.4 and more Source cves: CVE-2021-42575 Source advisory: MEND:CVE-2021-42575...

CVE-2021-42575

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

CVE-2021-42575: Undefined Security Weakness

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements...

rhel8 bug fix and enhancement update

An update is available for jmc, ee4j-parent, jaf, HdrHistogram, lz4-java, owasp-java-encoder, directory-maven-plugin, jmc-core. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

Fedora Update for owasp-java-html-sanitizer FEDORA-2016-f3b40fcbc3

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OWASP Java Encoder Filter Bypass

Product: OWASP Java Encoder Vulnerability: Mutation Based XSS Bypass Impact: Medium/Limited Authors: Rafay Baloch And Alex Infuhr Company: RHAinfoSEC Website: http://services.rafayhackingarticles.net Status: To be fixed in the next release ========= Description ========= Owasp encoder is an...

OWASP Java HTML Sanitizer信息泄露漏洞

Bugtraq ID: 50748 CVE ID：CVE-2011-4457 Owasp-java-html-sanitizer是一款基于java的过滤HTML的应用，用于保护XSS。 当过滤内容与用户交互并且JavaScipt禁用时OWASP HTML Sanitizer存在漏洞，允许重定向或POST到任意URL。导致敏感信息泄露。 OWASP Java HTML Sanitizer 厂商解决方案 OWASP Java HTML Sanitizer r88已经修复此漏洞，建议用户下载使用： http://code.google.com/p/owasp-java-html-sanitiz...

CVE-2011-4457: Exposure of Sensitive Information to an Unauthorized Actor

OWASP HTML Sanitizer aka owasp-java-html-sanitizer before 88, when JavaScript is disabled, allows user-assisted remote attackers to obtain potentially sensitive information via a crafted FORM element within a NOSCRIPT element...