CVE-2021-42575
Fixed in a distro release EPSS 3%
The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.
Products: owasp java_html_sanitizer, oracle middleware_common_libraries_and_tools, oracle primavera_unifier
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer | 20211018.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat red hat single sign on 7.6 | rh-sso7 | 0:1-5.el9sso |
| Red Hat red hat single sign on 7.6 | rh-sso7-javapackages-filesystem | 0:6.0.0-7.el9sso |
| Red Hat red hat single sign on 7.6 | rh-sso7-javapackages-tools | 0:6.0.0-7.el9sso |
| Red Hat red hat single sign on 7.6 | rh-sso7-keycloak | 0:18.0.3-1.redhat_00001.1.el7sso |
| Red Hat red hat single sign on 7.6 | rh-sso7-keycloak | 0:18.0.3-1.redhat_00001.1.el8sso |
| Red Hat red hat single sign on 7.6 | rh-sso7-keycloak | 0:18.0.3-1.redhat_00001.1.el9sso |
| Red Hat red hat single sign on 7.6 | rh-sso7-keycloak-server | 0:18.0.3-1.redhat_00001.1.el7sso |
| Red Hat red hat single sign on 7.6 | rh-sso7-keycloak-server | 0:18.0.3-1.redhat_00001.1.el8sso |
| Red Hat red hat single sign on 7.6 | rh-sso7-keycloak-server | 0:18.0.3-1.redhat_00001.1.el9sso |
| Red Hat red hat single sign on 7.6 | rh-sso7-python3-javapackages | 0:6.0.0-7.el9sso |
| Red Hat red hat single sign on 7.6 | rh-sso7-runtime | 0:1-5.el9sso |