GHSA-xv6v-72hh-g6g2

Source

https://github.com/advisories/GHSA-xv6v-72hh-g6g2

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-xv6v-72hh-g6g2/GHSA-xv6v-72hh-g6g2.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-xv6v-72hh-g6g2

Aliases

CVE-2018-1000643

Withdrawn

2020-06-16T22:04:31Z

Published

2018-10-18T17:22:26Z

Modified

2026-09-10T03:47:30Z

Summary

Moderate severity vulnerability that affects org.owasp.antisamy:antisamy

Details

OWASP OWASP ANTISAMY version 1.5.7 and earlier contains a Cross Site Scripting (XSS) vulnerability in AntiSamy.scan() - for both SAX & DOM that can result in Cross Site Scripting.

Database specific

{
    "cwe_ids":  [],
    "github_reviewed":  true,
    "github_reviewed_at":  "2020-06-16T22:04:31Z",
    "nvd_published_at":  null,
    "severity":  "MODERATE"
}

References

Affected packages

Maven / org.owasp.antisamy:antisamy

Package

Name: org.owasp.antisamy:antisamy; View open source insights on deps.dev
Purl: pkg:maven/org.owasp.antisamy/antisamy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

1.5.7

Affected versions

1.*

1.4.2

1.4.3

1.4.4

1.4.5

1.5

1.5.1

1.5.2

1.5.3

1.5.5

1.5.6

1.5.7

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-xv6v-72hh-g6g2/GHSA-xv6v-72hh-g6g2.json"