Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.owasp.antisamy:antisamy

7 known vulnerabilities (2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7 · 2 medium
Registry
Maven Central

Advisories 7

  • CVE-2024-23635Medium 6.1

    AntiSamy malicious input can provoke XSS when preserving comments

    Affected: fixed in 1.7.5.

  • CVE-2023-43643Medium 6.1

    mXSS in AntiSamy

    Affected: fixed in 1.7.4.

  • OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input.

    Affected: fixed in 1.6.7.

  • OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input.

    Affected: fixed in 1.6.6.

  • OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected).

    Affected: from 1.5.7, fixed in 1.6.4.

  • OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of : to construct a javascript: URL.

    Affected: fixed in 1.5.7.

  • In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass…

    Affected: fixed in 1.5.5.