CVE-2021-42575

PoC —

CVSS 3.1

9.8 critical

EPSS

3%p87

Published

Oct 18, 2021 (Oct 18, 2021)

Modified

Jun 17, 2026

Description

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.

Vendors: owasp oracle
Products: java html sanitizer, middleware common libraries and tools, primavera unifier
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.0%)

In the news0 stories

No ingested article mentions this CVE yet.