CVE-2021-42575

CRITICAL9.8EPSS 0.72%

Policies not properly enforced in OWASP Java HTML Sanitizer

發布日:2021/10/19修改日:2024/2/19

也稱為:GHSA-3w73-fmf3-hg5c

描述

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the `SELECT`, `STYLE`, and `OPTION` elements.

受影響套件(1)

Maven/com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizerfrom 0, < 20211018.1

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	CRITICAL9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

參考連結(4)