GitHub Advisoryadvisory · Maven

GHSA-3w73-fmf3-hg5c Policies not properly enforced in OWASP Java HTML Sanitizer

CRITICAL Published 2021-10-19 Modified 2022-02-23 Official page ↗

Aliases: CVE-2021-42575
Ecosystem: Maven
Packages: com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer
Severity: Critical
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-20
Reviewed: 2021-10-19

Affected packages

• Maven com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer: < 20211018.1 → fixed in 20211018.1

Description

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the `SELECT`, `STYLE`, and `OPTION` elements.

Related

Alias · CVE (1)

CVE-2021-42575 The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements. vulnerability

Weakness · CWE (1)

CWE-20 Improper Input Validation weakness

References