Security Advisory

CVE-2021-35043

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-07-19 14:53:09

Last updated 2024-08-04 00:33:50

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstrated by a javascript: URL with &#00058 as the replacement for the : character.

← Browse all CVEs View on cve.org ↗