{"action":"Upgrade com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer to 88 or later.","affected":[{"fixed":"88","introduced":"0"}],"component":"com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer","cve_ids":["CVE-2011-4457"],"ecosystem":"Maven","epss":0.01366,"exploited":false,"fixed_versions":["88"],"ghsa_id":"GHSA-pcm9-fp55-563v","id":"tcs_01M5N978XF284QD42HAG5B2Z2B","modified_at":"2024-12-02T05:41:41.690237Z","published_at":"2022-05-17T05:36:48Z","references":["https://osv.dev/vulnerability/GHSA-pcm9-fp55-563v","https://nvd.nist.gov/vuln/detail/CVE-2011-4457","https://github.com/OWASP/java-html-sanitizer/commit/2027d3df73f62eb30b7f08269f346989f03144bd","https://github.com/OWASP/java-html-sanitizer","https://github.com/OWASP/java-html-sanitizer/blob/35c506cfd452dba634202f13a7cc2e2a63ad7ee0/change_log.md?plain=1#L103","https://github.com/OWASP/java-html-sanitizer/blob/35c506cfd452dba634202f13a7cc2e2a63ad7ee0/docs/cve20114457.md","http://code.google.com/p/owasp-java-html-sanitizer/wiki/CVE20114457","http://owasp-java-html-sanitizer.googlecode.com/svn/trunk/CHANGE_LOG.html"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-pcm9-fp55-563v","url":"https://osv.dev/vulnerability/GHSA-pcm9-fp55-563v"}],"summary":"OWASP HTML Sanitizer allows redirecting to an arbitrary URL when JavaScript is disabled"}