Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-35043
6.1
MEDIUMCVSS v3
Published
July 19, 2021
CVSS v2
4.3 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstrated by a javascript: URL with : as the replacement for the : character.
nahsra/antisamy
GitHuba library for performing fast, configurable cleansing of HTML coming from untrusted sources
GitHuba library for performing fast, configurable cleansing of HTML coming from untrusted sources< 1.6.4NVD