Package · Debian

libowasp-antisamy-java

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.1

CVE-2017-14735 Public exploit

OWASP AntiSamy Cross-site Scripting vulnerability

OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of &colon; to construct a javascript: URL.

libowasp-antisamy-java org.owasp.antisamy:antisamy libowasp-antisamy-java Debian Ubuntu Maven

Sep 25, 2017
Medium 6.1

CVE-2016-10006 Public exploit

OWASP AntiSamy vulnerable to Cross-site Scripting

In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass the library protections and supply executable code. The impact is XSS.

libowasp-antisamy-java org.owasp.antisamy:antisamy libowasp-antisamy-java Debian Ubuntu Maven

Dec 24, 2016