Latest Antisamy project Vulnerabilities

● CVE-2024-23635

AntiSamy malicious input can provoke XSS when preserving comments

maven/org.owasp.antisamy:antisamy<=1.7.4

Antisamy Project Antisamy<1.7.5

● CVE-2023-43643

# Impact There is a potential for a mutation XSS (mXSS) vulnerability in AntiSamy caused by flawed parsing of the HTML being sanitized. To be subject to this vulnerability the `preserveComments` dire...

Antisamy Project Antisamy<1.7.4

● CVE-2022-29577

OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input. The output serializer does not properly encode the supposed Cascading Style Sheets (CSS) content. NOT...

Antisamy Project Antisamy<1.6.7

Oracle Enterprise Manager Base Platform=13.4.0.0

Oracle Enterprise Manager Base Platform=13.5.0.0

Oracle WebLogic Server=12.2.1.3.0

Oracle WebLogic Server=12.2.1.4.0

Oracle WebLogic Server=14.1.1.0.0

● CVE-2022-28366

Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes excessive heap memory consumption. In particular, this issue exists in HtmlUnit-Ne...

Cyberneko Html Project Cyberneko Html<=1.9.22

Htmlunit Project Htmlunit<2.27

Antisamy Project Antisamy<1.6.6

Htmlunit Htmlunit<2.27

● CVE-2021-35043

OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstrated by a javascript: URL with &#00058 as the replacement for...

Antisamy Project Antisamy<1.6.4

Oracle Retail Back Office=14.0

Oracle Retail Back Office=14.1

Oracle Retail Central Office=14.0

Oracle Retail Central Office=14.1

Oracle Retail Returns Management=14.0

and 23 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.