antisamy project kayıtları
antisamy project üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Saldırı profili
Tüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2022-28366İstismar yok | Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes excessive heap memory cyberneko html project · cyberneko html | Yüksek7,5 | — | %2,1 | 21 Nis 2022 |
25İzleyin | CVE-2016-10006Kavram kanıtı | In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass thantisamy project · antisamy · CWE-79 | Orta6,1 | — | %2,3 | 24 Ara 2016 |
24İzleyin | CVE-2017-14735Kavram kanıtı | OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of : to construct a javascript: URL.antisamy project · antisamy · CWE-79 | Orta6,1 | — | %1,6 | 25 Eyl 2017 |
24İzleyin | CVE-2021-35043İstismar yok | OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected).antisamy project · antisamy · CWE-79 | Orta6,1 | — | %1,5 | 19 Tem 2021 |
24İzleyin | CVE-2022-29577Kavram kanıtı | OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input.antisamy project · antisamy · CWE-79 | Orta6,1 | — | %1,3 | 21 Nis 2022 |
24İzleyin | CVE-2022-28367İstismar yok | OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input.antisamy project · antisamy · CWE-79 | Orta6,1 | — | %1,0 | 21 Nis 2022 |
24İzleyin | CVE-2023-43643İstismar yok | AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources.antisamy project · antisamy · CWE-79 | Orta6,1 | — | %0,5 | 9 Eki 2023 |
24İzleyin | CVE-2024-23635İstismar yok | AntiSamy malicious input can provoke XSS when preserving commentsantisamy project · antisamy · CWE-79 | Orta6,1 | — | %0,3 | 2 Şub 2024 |
- CVE-2022-2836631İzleyin
Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes excessive heap memory
YüksekCVSS 7,5İstismar yokEPSS %2cyberneko html project · cyberneko html21 Nis 2022
- CVE-2016-1000625İzleyin
In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass th
OrtaCVSS 6,1Kavram kanıtıEPSS %2antisamy project · antisamy24 Ara 2016
- CVE-2017-1473524İzleyin
OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of : to construct a javascript: URL.
OrtaCVSS 6,1Kavram kanıtıEPSS %1antisamy project · antisamy25 Eyl 2017
- CVE-2021-3504324İzleyin
OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected).
OrtaCVSS 6,1İstismar yokEPSS %1antisamy project · antisamy19 Tem 2021
- CVE-2022-2957724İzleyin
OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input.
OrtaCVSS 6,1Kavram kanıtıEPSS %1antisamy project · antisamy21 Nis 2022
- CVE-2022-2836724İzleyin
OWASP AntiSamy before 1.6.6 allows XSS via HTML tag smuggling on STYLE content with crafted input.
OrtaCVSS 6,1İstismar yokEPSS %1antisamy project · antisamy21 Nis 2022
- CVE-2023-4364324İzleyin
AntiSamy is a library for performing fast, configurable cleansing of HTML coming from untrusted sources.
OrtaCVSS 6,1İstismar yokEPSS %0antisamy project · antisamy9 Eki 2023
- CVE-2024-2363524İzleyin
AntiSamy malicious input can provoke XSS when preserving comments
OrtaCVSS 6,1İstismar yokEPSS %0antisamy project · antisamy2 Şub 2024