← All advisories

Critical severityNVD Advisory· Published Oct 18, 2021· Updated Aug 4, 2024

CVE-2021-42575

CVE-2021-42575

Description

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizerMaven	< 20211018.1	20211018.1

Affected products

2

OWASP/Java HTML Sanitizerdescription
ghsa-coords
pkg:maven/com.googlecode.owasp-java-html-sanitizer/owasp-java-html-sanitizer
Range: < 20211018.1

Patches

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

github.com/advisories/GHSA-3w73-fmf3-hg5cghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-42575ghsaADVISORY
docs.google.com/document/d/11SoX296sMS0XoQiQbpxc5pNxSdbJKDJkm5BDv0zrX50ghsaWEB
docs.google.com/document/d/11SoX296sMS0XoQiQbpxc5pNxSdbJKDJkm5BDv0zrX50/mitrex_refsource_MISC
www.oracle.com/security-alerts/cpujan2022.htmlghsax_refsource_MISCWEB
www.oracle.com/security-alerts/cpujul2022.htmlghsax_refsource_MISCWEB

News mentions

0

No linked articles in our index yet.