Lucene search
K

8 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2024-23635

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to 1.7.5, there is a potential for a mutation XSS...

6.1CVSS6.6AI score0.00211EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 9:43 a.m.6 views

CVE-2024-23635

AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to 1.7.5, there is a potential for a mutation XSS mXSS vulnerability in AntiSamy caused by flawed parsing of the HTML being sanitized. To be subject to this vulnerability the...

6.1CVSS5.7AI score0.00211EPSS
Exploits0References1
OSV
OSV
added 2024/02/02 6:10 p.m.0 views

GHSA-2MRQ-W8PV-5PVQ Malicious input can provoke XSS when preserving comments

Impact There is a potential for a mutation XSS mXSS vulnerability in AntiSamy caused by flawed parsing of the HTML being sanitized. To be subject to this vulnerability the preserveComments directive must be enabled in your policy file. As a result, certain crafty inputs can result in elements in...

6.1CVSS6.6AI score0.00211EPSS
Exploits0References5
OSV
OSV
added 2024/02/02 5:15 p.m.1 views

DEBIAN-CVE-2024-23635

AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to 1.7.5, there is a potential for a mutation XSS mXSS vulnerability in AntiSamy caused by flawed parsing of the HTML being sanitized. To be subject to this vulnerability the...

6.1CVSS6.2AI score0.00211EPSS
Exploits0References1
OSV
OSV
added 2024/02/02 5:15 p.m.0 views

UBUNTU-CVE-2024-23635

AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Prior to 1.7.5, there is a potential for a mutation XSS mXSS vulnerability in AntiSamy caused by flawed parsing of the HTML being sanitized. To be subject to this vulnerability the...

6.1CVSS6.1AI score0.00211EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/01/02 8:6 p.m.13 views

CVE-2023-51652 OWASP.AntiSamy mXSS when preserving comments

OWASP AntiSamy .NET is a library for performing cleansing of HTML coming from untrusted sources. Prior to version 1.2.0, there is a potential for a mutation cross-site scripting mXSS vulnerability in AntiSamy caused by flawed parsing of the HTML being sanitized. To be subject to this vulnerabilit...

6.1CVSS6.2AI score0.00918EPSS
Exploits0References3
Snyk
Snyk
added 2024/01/02 4:38 p.m.0 views

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Overview OWASP.AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources. Affected versions of this package are vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' due to flawed parsing of the HTML being...

6.1CVSS6.8AI score0.00918EPSS
Exploits0References2
OSV
OSV
added 2023/10/09 12:42 a.m.0 views

GHSA-PCF2-GH6G-H5R2 mXSS in AntiSamy

Impact There is a potential for a mutation XSS mXSS vulnerability in AntiSamy caused by flawed parsing of the HTML being sanitized. To be subject to this vulnerability the preserveComments directive must be enabled in your policy file and also allow for certain tags at the same time. As a result,...

6.1CVSS5.7AI score0.00463EPSS
Exploits1References4
Rows per page
Query Builder