Read the docs

Owasp-java-html-sanitizer Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Owasp-java-html-sanitizer Project records in CISA KEV

No Owasp-java-html-sanitizer Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority LOW 16

OWASP HTML Sanitizer (aka owasp-java-html-sanitizer) before 88, when JavaScript is disabled, allows user-assisted remote attackers to obtain potentially sensitive information via a crafted FORM element within a NOSCRIPT…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01366 Published 2011-11-17 Fixed in 88 CWE-200
Open these records in search →