CVE-2011-4457

OWASP HTML Sanitizer (aka owasp-java-html-sanitizer) before 88, when JavaScript is disabled, allows user-assisted remote attackers to obtain potentially sensitive information via a crafted FORM element within a NOSCRIPT element.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
2.6 UNKNOWN
NETWORK
HIGH
AV:N/AC:H/Au:N/C:P/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 44%
VendorProductVersion
owasp-java-html-sanitizer_projectowasp-java-html-sanitizer
𝑥
≤ 83
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://code.google.com/p/owasp-java-html-sanitizer/wiki/CVE20114457
http://owasp-java-html-sanitizer.googlecode.com/svn/trunk/CHANGE_LOG.html
http://code.google.com/p/owasp-java-html-sanitizer/wiki/CVE20114457
http://owasp-java-html-sanitizer.googlecode.com/svn/trunk/CHANGE_LOG.html