Owasp Json-Sanitizer
3 CVEs affecting Owasp Json-Sanitizer. Latest disclosed: 2021-01-13. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-23899 | Critical | 9.8 | 2021-01-13 | OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input. This allows an attacker to inject arbitrary HTML… |
CVE-2021-23900 | High | 7.5 | 2021-01-13 | OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input. This may lead to denial of service if the applica… |
CVE-2020-13973 | Medium | 6.1 | 2020-06-09 | OWASP json-sanitizer before 1.2.1 allows XSS. An attacker who controls a substring of the input JSON, and controls another substring adjacent to a SCRIPT eleme… |