Vendors / Antisamy Project Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Antisamy Project records in CISA KEV No Antisamy Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 37
Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes excessive heap memory consumption.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02184 · Published 2022-04-21 · Fixed in 2.27
Priority LOW 32
In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass the library protections and supply executable code.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02354 · Published 2016-12-24 · Fixed in 1.5.5 CWE-79
Priority LOW 31
OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of : to construct a javascript: URL.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01664 · Published 2017-09-25 · Fixed in 1.5.7 CWE-79
Priority LOW 30
OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01328 · Published 2022-04-21 · Fixed in 1.6.7 CWE-79
Priority LOW 30
OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected).
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01513 · Published 2021-07-19 · Partial fix · 1.6.4 CWE-79
Priority LOW 29
OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01006 · Published 2022-04-21 · Fixed in 1.6.6 CWE-79
Priority LOW 28
AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00541 · Published 2023-10-09 · Fixed in 1.7.4 CWE-79
Priority LOW 27
AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00368 · Published 2024-02-02 · Fixed in 1.7.5 CWE-79
Open these records in search → All records by CVSS severity
0 1 7 0 0
THREATIST.IORead the docs