What is GHSA-q44v-xc3g-v7jq?

GHSA-q44v-xc3g-v7jq is a security advisory published by GitHub Security Advisories with Medium severity. OWASP AntiSamy Cross-site Scripting vulnerability

Which CVE IDs does GHSA-q44v-xc3g-v7jq cover?

GHSA-q44v-xc3g-v7jq covers the following CVE IDs: CVE-2017-14735. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-q44v-xc3g-v7jq?

GHSA-q44v-xc3g-v7jq has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-q44v-xc3g-v7jq?

GHSA-q44v-xc3g-v7jq affects 1 product, including: maven/org.owasp.antisamy:antisamy:\u003c 1.5.7.

GHSA-q44v-xc3g-v7jqMediumCVSS 6.1

OWASP AntiSamy Cross-site Scripting vulnerability

Vendor

GitHub Security Advisories

Published

October 18, 2018

Last Modified

January 28, 2023

🔗 CVE IDs covered (1)

CVE-2017-14735 →

📋 Description

OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of : to construct a javascript: URL.

🎯 Affected products1

maven/org.owasp.antisamy:antisamy:< 1.5.7

🔗 References (10)

https://nvd.nist.gov/vuln/detail/CVE-2017-14735
https://github.com/nahsra/antisamy/issues/10
https://github.com/advisories/GHSA-q44v-xc3g-v7jq
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpuapr2020.html
https://www.oracle.com/security-alerts/cpujan2020.html
https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html
http://www.securityfocus.com/bid/105656