CVE-2021-42575

CRITICAL9.8EPSS 0.72%

Policies not properly enforced in OWASP Java HTML Sanitizer

Published: 10/19/2021Modified: 2/19/2024
Also known as:GHSA-3w73-fmf3-hg5c

Description

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the `SELECT`, `STYLE`, and `OPTION` elements.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1CRITICAL9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (4)