CVE-2021-35043
- Source
- https://cve.org/CVERecord?id=CVE-2021-35043
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-35043.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2021-35043
- Aliases
- Downstream
- Published
- 2021-07-19T15:15:07.747Z
- Modified
- 2026-07-08T06:00:39.860635714Z
- Severity
-
- 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstrated by a javascript: URL with : as the replacement for the : character.
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:a:oracle:banking_enterprise_default_managment:*:*:*:*:*:*:*:*" ], "source": "CPE_RANGE", "extracted_events": [ { "introduced": "2.3.0" }, { "last_affected": "2.4.0" } ], "vendor_product": "oracle:banking_enterprise_default_managment" }, { "cpes": [ "cpe:2.3:a:oracle:banking_platform:*:*:*:*:*:*:*:*" ], "source": "CPE_RANGE", "extracted_events": [ { "introduced": "2.3.0" }, { "last_affected": "2.4.1" } ], "vendor_product": "oracle:banking_platform" }, { "cpes": [ "cpe:2.3:a:oracle:banking_enterprise_default_management:2.10.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:banking_enterprise_default_management:2.12.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:banking_enterprise_default_management:2.6.2:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:banking_enterprise_default_management:2.7.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:banking_enterprise_default_management:2.7.1:*:*:*:*:*:*:*" ], "source": "CPE_STRING", "vendor_product": "oracle:banking_enterprise_default_management", "extracted_events": [ { "introduced": "2.6.2" }, { "last_affected": "2.6.2" }, { "introduced": "2.7.0" }, { "last_affected": "2.7.0" }, { "introduced": "2.7.1" }, { "last_affected": "2.7.1" }, { "introduced": "2.10.0" }, { "last_affected": "2.10.0" }, { "introduced": "2.12.0" }, { "last_affected": "2.12.0" } ] }, { "cpes": [ "cpe:2.3:a:oracle:banking_party_management:2.7.0:*:*:*:*:*:*:*" ], "source": "CPE_STRING", "vendor_product": "oracle:banking_party_management", "extracted_events": [ { "introduced": "2.7.0" }, { "last_affected": "2.7.0" } ] }, { "cpes": [ "cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:banking_platform:2.7.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:*" ], "source": "CPE_STRING", "extracted_events": [ { "introduced": "2.6.2" }, { "last_affected": "2.6.2" }, { "introduced": "2.7.0" }, { "last_affected": "2.7.0" }, { "introduced": "2.7.1" }, { "last_affected": "2.7.1" } ], "vendor_product": "oracle:banking_platform" }, { "cpes": [ "cpe:2.3:a:oracle:insurance_policy_administration:11.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:insurance_policy_administration:11.1.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:insurance_policy_administration:11.2.8:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:insurance_policy_administration:11.3.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:insurance_policy_administration:11.3.1:*:*:*:*:*:*:*" ], "source": "CPE_STRING", "vendor_product": "oracle:insurance_policy_administration", "extracted_events": [ { "introduced": "11.0.2" }, { "last_affected": "11.0.2" }, { "introduced": "11.1.0" }, { "last_affected": "11.1.0" }, { "introduced": "11.2.8" }, { "last_affected": "11.2.8" }, { "introduced": "11.3.0" }, { "last_affected": "11.3.0" }, { "introduced": "11.3.1" }, { "last_affected": "11.3.1" } ] }, { "cpes": [ "cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.3.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.4.0:*:*:*:*:*:*:*" ], "source": "CPE_STRING", "extracted_events": [ { "introduced": "12.2.1.3.0" }, { "last_affected": "12.2.1.3.0" }, { "introduced": "12.2.1.4.0" }, { "last_affected": "12.2.1.4.0" } ], "vendor_product": "oracle:middleware_common_libraries_and_tools" }, { "cpes": [ "cpe:2.3:a:oracle:retail_back_office:14.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:*" ], "source": "CPE_STRING", "extracted_events": [ { "introduced": "14.0" }, { "last_affected": "14.0" }, { "introduced": "14.1" }, { "last_affected": "14.1" } ], "vendor_product": "oracle:retail_back_office" }, { "cpes": [ "cpe:2.3:a:oracle:retail_central_office:14.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:retail_central_office:14.1:*:*:*:*:*:*:*" ], "source": "CPE_STRING", "vendor_product": "oracle:retail_central_office", "extracted_events": [ { "introduced": "14.0" }, { "last_affected": "14.0" }, { "introduced": "14.1" }, { "last_affected": "14.1" } ] }, { "cpes": [ "cpe:2.3:a:oracle:retail_returns_management:14.0:*:*:*:*:*:*:*", "cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:*" ], "source": "CPE_STRING", "extracted_events": [ { "introduced": "14.0" }, { "last_affected": "14.0" }, { "introduced": "14.1" }, { "last_affected": "14.1" } ], "vendor_product": "oracle:retail_returns_management" } ] }- References
-
- https://github.com/nahsra/antisamy/pull/87
- https://github.com/nahsra/antisamy/releases/tag/v1.6.4
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://www.oracle.com/security-alerts/cpujan2022.html
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://www.oracle.com/security-alerts/cpuoct2021.html
Affected packages
Git / github.com/nahsra/antisamy
Affected ranges
- Type
- GIT
- Repo
- https://github.com/nahsra/antisamy
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
- Database specific
{ "cpe": "cpe:2.3:a:antisamy_project:antisamy:*:*:*:*:*:*:*:*", "source": [ "CPE_RANGE", "REFERENCES" ], "extracted_events": [ { "introduced": "0" }, { "fixed": "1.6.4" } ] }