Lucene search
+L

3 matches found

osv_ghsa
osv_ghsa
•added 2021/06/16 5:34 p.m.•79 views

GHSA-MM8J-9X84-M9CV Arbitrary code injection in json-sanitizer

OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input. This allows an attacker to inject arbitrary HTML or XML into embedding documents...

9.8CVSS7.3AI score0.02093EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2021/01/13 4:15 p.m.•29 views

CVE-2021-23899

OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input. This allows an attacker to inject arbitrary HTML or XML into embedding documents...

9.8CVSS6.7AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2021/01/13 3:49 p.m.•47 views

CVE-2021-23899

OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input. This allows an attacker to inject arbitrary HTML or XML into embedding documents...

9.6AI score0.02093EPSS
SaveExploits0References3
Rows per page
Query Builder