CVE-2011-4457
OWASP HTML Sanitizer allows redirecting to an arbitrary URL when JavaScript is disabled
EPSS 1.4%
描述
OWASP HTML Sanitizer (aka owasp-java-html-sanitizer) before 88, when JavaScript is disabled, allows user-assisted remote attackers to obtain potentially sensitive information via a crafted FORM element within a NOSCRIPT element.
如何修補 CVE-2011-4457
要修補 CVE-2011-4457,請將受影響套件升級到下列已修補版本。
CVE-2011-4457 正在被利用嗎?
低 — EPSS 為 1.4%,目前沒有觀察到大規模利用活動。
受影響套件(1)
- from 0, < 88