owasp-java-html-sanitizer project records
1 published records for vendor owasp-java-html-sanitizer project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
1 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
10Monitor | CVE-2011-4457No exploit | OWASP HTML Sanitizer (aka owasp-java-html-sanitizer) before 88, when JavaScript is disabled, allows user-assisted remote attackers to obtainowasp-java-html-sanitizer project · owasp-java-html-sanitizer · CWE-200 | Low2.6 | — | 1.4% | Nov 17, 2011 |
- CVE-2011-445710Monitor
OWASP HTML Sanitizer (aka owasp-java-html-sanitizer) before 88, when JavaScript is disabled, allows user-assisted remote attackers to obtain
LowCVSS 2.6No exploitEPSS 1%owasp-java-html-sanitizer project · owasp-java-html-sanitizerNov 17, 2011