~ / search / GHSA-3w73-fmf3-hg5c

GHSA-3w73-fmf3-hg5c

Policies not properly enforced in OWASP Java HTML Sanitizer

Source: GitHub Advisory Database (reviewed) Critical CVE-2021-42575

Packages

EcosystemPackageAffectedFixed in
Maven com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer < 20211018.1 20211018.1

Details

As written in the advisory (Markdown source, shown as plain text).

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the `SELECT`, `STYLE`, and `OPTION` elements.

References

External links from the advisory. They lead to third-party sites.