Cross-site Scripting (XSS)

🗓️ 22 Apr 2022 07:49:31Reported by Veracode Vulnerability DatabaseType

antisyamy XSS vulnerability in processStyleTa

Reporter	Title	Published	Views	Family All 34
IBM Security Bulletins	Security Bulletin: There are several vulnerabilities in AntiSamy used by IBM Maximo Asset Management (CVE-2022-28367, CVE-2022-29577)	5 Jun 202313:43	–	ibm
IBM Security Bulletins	Security Bulletin: There are several vulnerabilities in AntiSamy used by BM Maximo Manage application in IBM Maximo Application Suite (CVE-2022-28367, CVE-2022-29577)	24 Mar 202321:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities (CVE-2022-48195, CVE-2022-29577, CVE-2022-28367)	17 Oct 202400:30	–	ibm
ATTACKERKB	CVE-2022-29577	21 Apr 202223:15	–	attackerkb
BDU FSTEC	The vulnerability of the library for performing fast, customizable HTML AntiSamy cleanup is related to incorrect encoding of the content in cascading style tables. This allows attackers to perform cross-site scripting attacks.	14 Nov 202200:00	–	bdu_fstec
Circl	CVE-2022-29577	22 Apr 202202:27	–	circl
CNNVD	OWASP AntiSamy 跨站脚本漏洞	21 Apr 202200:00	–	cnnvd
CVE	CVE-2022-29577	21 Apr 202222:42	–	cve
Cvelist	CVE-2022-29577	21 Apr 202222:42	–	cvelist
Debian CVE	CVE-2022-29577	21 Apr 202222:42	–	debiancve

Vulners

Node

antisamy_project antisamyRange1.6.5–1.6.6.1java

Source	Link
github	www.github.com/nahsra/antisamy/pull/168
github	www.github.com/nahsra/antisamy/commit/32e273507da0e964b58c50fd8a4c94c9d9363af0
github	www.github.com/nahsra/antisamy/releases/tag/v1.6.7
oracle	www.oracle.com/security-alerts/cpujul2022.html

23 Feb 2023 19:45Current

3.3Low risk

Vulners AI Score3.3

CVSS 24.3

CVSS 3.16.1

EPSS0.01282