critical9.8
CVE-2021-42575
The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.
Impact
The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Owasp | Java Html Sanitizer | before 20211018.2 |
| Oracle | Middleware Common Libraries And Tools | Versions 12.2.1.3.0, 12.2.1.4.0 |
| Oracle | Primavera Unifier | from 17.7 through 17.12 Versions 18.8, 19.12, 20.12, 21.12 |
References
- NVD record
- CVE.org record
- https://docs.google.com/document/d/11SoX296sMS0XoQiQbpxc5pNxSdbJKDJkm5BDv0zrX50/
- https://www.oracle.com/security-alerts/cpujan2022.html
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://docs.google.com/document/d/11SoX296sMS0XoQiQbpxc5pNxSdbJKDJkm5BDv0zrX50/
- https://www.oracle.com/security-alerts/cpujan2022.html
- https://www.oracle.com/security-alerts/cpujul2022.html