CVE-2011-4457

LOW · CVSS 2.6 EPSS 1.37%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2011-11-17 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2011-4457

Severity

LOW

CVSS

2.6

EPSS

1.37%

Java

Original Filing — NVD Description

OWASP HTML Sanitizer (aka owasp-java-html-sanitizer) before 88, when JavaScript is disabled, allows user-assisted remote attackers to obtain potentially sensitive information via a crafted FORM element within a NOSCRIPT element.