CVE-2017-14735

OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of : to construct a javascript: URL.
Configurations

Configuration 1 (hide)

cpe:2.3:a:antisamy_project:antisamy:*:*:*:*:*:*:*:*

History

14 Jun 2021, 18:15

Type Values Removed Values Added
References
  • (MISC) https://www.oracle.com/security-alerts/cpuApr2021.html -

Information

Published : 2017-09-25 21:29

Updated : 2024-02-04 19:29


NVD link : CVE-2017-14735

Mitre link : CVE-2017-14735

CVE.ORG link : CVE-2017-14735


JSON object : View

Products Affected

antisamy_project

  • antisamy
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')