CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Java.
CVE
CVE-2021-42575
Severity
CRITICAL
CVSS
9.8
EPSS
2.84%
Java
Original NVD Description
The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.
Related CVEs
Other vulnerabilities affecting the same vendor(s)