CVE-2024-23635
unknown
CVSS v3
—
CVSS v2
—
VIR risk
—
Description
Malicious input can provoke XSS when preserving comments
Predictions
Exploit likelihood
30%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2024-23635
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| debian | bookworm | affected | |
| debian | bullseye | affected | |
| debian | forky | affected | |
| debian | sid | affected | |
| debian | trixie | affected | |
Package impact
| Ecosystem | Package | Vulnerable | Fixed |
|---|---|---|---|
| Maven | org.owasp.antisamy:antisamy | <1.7.5 | 1.7.5 |
References
- https://github.com/nahsra/antisamy/security/advisories/GHSA-2mrq-w8pv-5pvq
- https://nvd.nist.gov/vuln/detail/CVE-2024-23635
- https://github.com/nahsra/antisamy/commit/12a2e31d3855430c119480655c2bbbbb79a66ecd
- https://github.com/nahsra/antisamy/commit/3e84410ed06ab67f0a4cc3183c67528210f4847d
- https://github.com/nahsra/antisamy
- https://security-tracker.debian.org/tracker/CVE-2024-23635
Verify integrity in audit chain (admin only). AS-IS.