Lucene search
+L

36 matches found

Kitploit
Kitploit
added 2026/09/03 9:53 p.m.6 views

json-sanitizer

json-sanitizer بما أن المحتوى يشبه JSON، فإن أداة تعقيم JSON تحوّله إلى JSON صالح. بدء الاستخدام - جهة الاتصال يمكن ربط هذه الأداة بأي من طرفي خط أنابيب البيانات للمساعدة في تحقيق مبدأ بوستل: كن متحفظًا في ما تفعله، كن متسامحًا في ما تقبله من الآخرين عند تطبيقها على محتوى يشبه JSON من الآخرين،...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/03 9:31 p.m.7 views

json-sanitizer

json-sanitizer بالنظر إلى محتوى شبيه بـ JSON، يحوّله JSON Sanitizer إلى JSON صالح. البدء - التواصل يمكن ربط هذه المكتبة بأي من طرفي خط معالجة البيانات للمساعدة في تحقيق مبدأ Postel: كن متحفظًا فيما تفعله، وكن متسامحًا فيما تقبله من الآخرين عند تطبيقها على محتوى شبيه بـ JSON قادم من الآخرين، ستنتج...

5.9AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/03 7:59 p.m.8 views

OWASP__json-sanitizer_CVE-2020-13973_1-2-0

json-sanitizer بما أنّ المحتوى شبيه بـ JSON، فإن مُنقّي JSON يحوّله إلى JSON صالح. البدء - اتصل بنا يمكن إرفاق هذه المكتبة في أيّ من طرفي خط أنابيب البيانات للمساعدة في تحقيق مبدأ بوستل: كن محافظًا فيما تفعله، وكن متسامحًا فيما تقبله من الآخرين عند تطبيقه على محتوى شبيه بـ JSON من الآخرين، سينتج...

6.1CVSS6.4AI score0.01119EPSS
SaveExploits1References2
NVD
NVD
added 2026/08/28 4:17 p.m.7 views

CVE-2026-37736

An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS0.00343EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/28 12:00 a.m.8 views

EUVD-2026-67773

An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS5.9AI score0.00343EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/28 12:00 a.m.30 views

CVE-2026-37736

An issue in the JsonSanitizer.sanitize component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service DoS via a crafted input...

0.00343EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/28 12:00 a.m.22 views

CVE-2026-37736

An issue in the JsonSanitizer.sanitize() component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service (DoS) via a crafted input. The vulnerability is rated CVSS 3.1: 7.5 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, meaning it is network-exploitable with n...

7.5CVSS5.9AI score0.00343EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/26 12:00 a.m.16 views

Owasp Json-sanitizer 安全漏洞

Owasp Json-sanitizer is a Java-based code library from the OWASP Foundation that generates Json format data from Json like text content. A security vulnerability exists in Owasp Json-sanitizer version 20240325.1, which stems from HtmlPolicyBuilder allowing noscript and style tags, which could lea...

8.6CVSS6AI score0.00247EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2021-1360

Malware in sbrugna...

9.8CVSS9.2AI score0.02068EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.15 views

EUVD-2021-1020

Malware in sbrugna...

7.5CVSS7.5AI score0.02099EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/05/22 7:19 p.m.16 views

CVE-2021-23900

OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input. This may lead to denial of service if the application is not prepared to handle these situations...

7.5CVSS6.8AI score0.02099EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:19 p.m.12 views

CVE-2021-23899

OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input. This allows an attacker to inject arbitrary HTML or XML into embedding documents...

9.8CVSS6.8AI score0.02068EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2022/02/10 11:04 p.m.83 views

Cross-site scripting in json-sanitizer

OWASP json-sanitizer before 1.2.1 allows XSS. An attacker who controls a substring of the input JSON, and controls another substring adjacent to a SCRIPT element in which the output is embedded as JavaScript, may be able to confuse the HTML parser as to where the SCRIPT element ends, and cause...

6.1CVSS1.6AI score0.01119EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/02/10 11:04 p.m.37 views

GHSA-G8JJ-899Q-8X3J Cross-site scripting in json-sanitizer

OWASP json-sanitizer before 1.2.1 allows XSS. An attacker who controls a substring of the input JSON, and controls another substring adjacent to a SCRIPT element in which the output is embedded as JavaScript, may be able to confuse the HTML parser as to where the SCRIPT element ends, and cause...

6.1CVSS5.8AI score0.01119EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
added 2021/06/16 5:34 p.m.65 views

Arbitrary code injection in json-sanitizer

OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input. This allows an attacker to inject arbitrary HTML or XML into embedding documents...

9.8CVSS2.9AI score0.02068EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2021/06/16 5:34 p.m.63 views

GHSA-MM8J-9X84-M9CV Arbitrary code injection in json-sanitizer

OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input. This allows an attacker to inject arbitrary HTML or XML into embedding documents...

9.8CVSS7.3AI score0.02068EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2021/05/13 10:31 p.m.76 views

Uncaught Exception leading to Denial of Service in json-sanitizer

OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input. This may lead to denial of service if the application is not prepared to handle these situations...

7.5CVSS1.2AI score0.02099EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
added 2021/01/14 6:04 a.m.33 views

Arbitrary Code Injection

json-sanitizer is vulnerable to arbtirary code injection. An attacker could potentially inject arbitrary HTML and XML into embedding documents as closing SCRIPT tags and CDATA section delimiters may be emitted for certain input...

9.8CVSS3AI score0.02068EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
added 2021/01/14 1:37 a.m.26 views

Denial Of Service (DoS)

json-sanitizer is vulnerable to denial of service. The vulnerability exists as certain invalid JSON characters are not sanitized, allowing an attacker to cause an undeclared exception and crash the application via a malicious string input...

7.5CVSS5.1AI score0.02099EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2021/01/14 12:00 a.m.69 views

Owasp Json-sanitizer Input Validation Error Vulnerability

Owasp Json-sanitizer is the Owasp Foundation of a Java-based Json can be based on the text content similar to the Json code library to generate data in Json format . An input validation error vulnerability exists in OWASP JSON -sanitizer prior to version 1.2.2, which stems from the fact that a...

7.5CVSS7AI score0.02099EPSS
SaveExploits0References1
Rows per page
Query Builder