Vulnerabilities > CVE-2023-44390 - Unspecified vulnerability in Htmlsanitizer Project Htmlsanitizer

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

htmlsanitizer-project

NVD

Published: 2023-10-05

Updated: 2024-11-21

Summary

HtmlSanitizer is a .NET library for cleaning HTML fragments and documents from constructs that can lead to XSS attacks. The vulnerability occurs in configurations where foreign content is allowed, i.e. either `svg` or `math` are in the list of allowed elements. In the case an application sanitizes user input with a vulnerable configuration, an attacker could bypass the sanitization and inject arbitrary HTML, including JavaScript code. Note that in the default configuration the vulnerability is not present. The vulnerability has been fixed in versions 8.0.723 and 8.1.722-beta (preview version).

Vulnerable Configurations

Part	Description	Count
Application	Htmlsanitizer_Project Htmlsanitizer Project Htmlsanitizer 8.1.719 Htmlsanitizer Project Htmlsanitizer - Htmlsanitizer Project Htmlsanitizer 2.0 Htmlsanitizer Project Htmlsanitizer 3.0 Htmlsanitizer Project Htmlsanitizer 3.1.76 Htmlsanitizer Project Htmlsanitizer 3.1.79 Htmlsanitizer Project Htmlsanitizer 3.1.91 Htmlsanitizer Project Htmlsanitizer 3.1.93 Htmlsanitizer Project Htmlsanitizer 3.1.98 Htmlsanitizer Project Htmlsanitizer 3.2.100 Htmlsanitizer Project Htmlsanitizer 3.2.103 Htmlsanitizer Project Htmlsanitizer 3.2.105 Htmlsanitizer Project Htmlsanitizer 3.3.122 Htmlsanitizer Project Htmlsanitizer 3.3.125 Htmlsanitizer Project Htmlsanitizer 3.3.126 Htmlsanitizer Project Htmlsanitizer 3.3.127 Htmlsanitizer Project Htmlsanitizer 3.3.128 Htmlsanitizer Project Htmlsanitizer 3.3.129 Htmlsanitizer Project Htmlsanitizer 3.3.130 Htmlsanitizer Project Htmlsanitizer 3.3.131 Htmlsanitizer Project Htmlsanitizer 3.3.132 Htmlsanitizer Project Htmlsanitizer 3.3.134 Htmlsanitizer Project Htmlsanitizer 3.3.140 Htmlsanitizer Project Htmlsanitizer 3.3.142 Htmlsanitizer Project Htmlsanitizer 3.3.143 Htmlsanitizer Project Htmlsanitizer 3.3.144 Htmlsanitizer Project Htmlsanitizer 3.3.145 Htmlsanitizer Project Htmlsanitizer 3.3.146 Htmlsanitizer Project Htmlsanitizer 3.3.147 Htmlsanitizer Project Htmlsanitizer 3.3.148 Htmlsanitizer Project Htmlsanitizer 3.4.152 Htmlsanitizer Project Htmlsanitizer 3.4.156 Htmlsanitizer Project Htmlsanitizer 3.5.167 Htmlsanitizer Project Htmlsanitizer 3.5.168 Htmlsanitizer Project Htmlsanitizer 3.5.169 Htmlsanitizer Project Htmlsanitizer 4.0.179 Htmlsanitizer Project Htmlsanitizer 4.0.180 Htmlsanitizer Project Htmlsanitizer 4.0.181 Htmlsanitizer Project Htmlsanitizer 4.0.182 Htmlsanitizer Project Htmlsanitizer 4.0.183 Htmlsanitizer Project Htmlsanitizer 4.0.185 Htmlsanitizer Project Htmlsanitizer 4.0.186 Htmlsanitizer Project Htmlsanitizer 4.0.187 Htmlsanitizer Project Htmlsanitizer 4.0.188 Htmlsanitizer Project Htmlsanitizer 4.0.189 Htmlsanitizer Project Htmlsanitizer 4.0.190 Htmlsanitizer Project Htmlsanitizer 4.0.191 Htmlsanitizer Project Htmlsanitizer 4.0.192 Htmlsanitizer Project Htmlsanitizer 4.0.193 Htmlsanitizer Project Htmlsanitizer 4.0.195 Htmlsanitizer Project Htmlsanitizer 4.0.197 Htmlsanitizer Project Htmlsanitizer 4.0.198 Htmlsanitizer Project Htmlsanitizer 4.0.199 Htmlsanitizer Project Htmlsanitizer 4.0.200 Htmlsanitizer Project Htmlsanitizer 4.0.201 Htmlsanitizer Project Htmlsanitizer 4.0.202 Htmlsanitizer Project Htmlsanitizer 4.0.203 Htmlsanitizer Project Htmlsanitizer 4.0.204 Htmlsanitizer Project Htmlsanitizer 4.0.205 Htmlsanitizer Project Htmlsanitizer 4.0.207 Htmlsanitizer Project Htmlsanitizer 4.0.209 Htmlsanitizer Project Htmlsanitizer 4.0.210 Htmlsanitizer Project Htmlsanitizer 4.0.211 Htmlsanitizer Project Htmlsanitizer 4.0.212 Htmlsanitizer Project Htmlsanitizer 4.0.217 Htmlsanitizer Project Htmlsanitizer 4.0.219 Htmlsanitizer Project Htmlsanitizer 4.0.220 Htmlsanitizer Project Htmlsanitizer 4.0.222 Htmlsanitizer Project Htmlsanitizer 4.0.224 Htmlsanitizer Project Htmlsanitizer 4.0.228 Htmlsanitizer Project Htmlsanitizer 4.0.229 Htmlsanitizer Project Htmlsanitizer 4.0.230 Htmlsanitizer Project Htmlsanitizer 5.0.214 Htmlsanitizer Project Htmlsanitizer 5.0.215 Htmlsanitizer Project Htmlsanitizer 5.0.216 Htmlsanitizer Project Htmlsanitizer 5.0.218 Htmlsanitizer Project Htmlsanitizer 5.0.233 Htmlsanitizer Project Htmlsanitizer 5.0.234 Htmlsanitizer Project Htmlsanitizer 5.0.236 Htmlsanitizer Project Htmlsanitizer 5.0.237 Htmlsanitizer Project Htmlsanitizer 5.0.239 Htmlsanitizer Project Htmlsanitizer 5.0.240 Htmlsanitizer Project Htmlsanitizer 5.0.242 Htmlsanitizer Project Htmlsanitizer 5.0.244 Htmlsanitizer Project Htmlsanitizer 5.0.245 Htmlsanitizer Project Htmlsanitizer 5.0.246 Htmlsanitizer Project Htmlsanitizer 5.0.248 Htmlsanitizer Project Htmlsanitizer 5.0.249 Htmlsanitizer Project Htmlsanitizer 5.0.250 Htmlsanitizer Project Htmlsanitizer 5.0.251 Htmlsanitizer Project Htmlsanitizer 5.0.257 Htmlsanitizer Project Htmlsanitizer 5.0.258 Htmlsanitizer Project Htmlsanitizer 5.0.260 Htmlsanitizer Project Htmlsanitizer 5.0.261 Htmlsanitizer Project Htmlsanitizer 5.0.263 Htmlsanitizer Project Htmlsanitizer 5.0.264 Htmlsanitizer Project Htmlsanitizer 5.0.266 Htmlsanitizer Project Htmlsanitizer 5.0.267 Htmlsanitizer Project Htmlsanitizer 5.0.269 Htmlsanitizer Project Htmlsanitizer 5.0.270 Htmlsanitizer Project Htmlsanitizer 5.0.272 Htmlsanitizer Project Htmlsanitizer 5.0.274 Htmlsanitizer Project Htmlsanitizer 5.0.275 Htmlsanitizer Project Htmlsanitizer 5.0.277 Htmlsanitizer Project Htmlsanitizer 5.0.278 Htmlsanitizer Project Htmlsanitizer 5.0.280 Htmlsanitizer Project Htmlsanitizer 5.0.281 Htmlsanitizer Project Htmlsanitizer 5.0.283 Htmlsanitizer Project Htmlsanitizer 5.0.284 Htmlsanitizer Project Htmlsanitizer 5.0.287 Htmlsanitizer Project Htmlsanitizer 5.0.288 Htmlsanitizer Project Htmlsanitizer 5.0.290 Htmlsanitizer Project Htmlsanitizer 5.0.291 Htmlsanitizer Project Htmlsanitizer 5.0.292 Htmlsanitizer Project Htmlsanitizer 5.0.293 Htmlsanitizer Project Htmlsanitizer 5.0.294 Htmlsanitizer Project Htmlsanitizer 5.0.296 Htmlsanitizer Project Htmlsanitizer 5.0.297 Htmlsanitizer Project Htmlsanitizer 5.0.298 Htmlsanitizer Project Htmlsanitizer 5.0.303 Htmlsanitizer Project Htmlsanitizer 5.0.304 Htmlsanitizer Project Htmlsanitizer 5.0.305 Htmlsanitizer Project Htmlsanitizer 5.0.307 Htmlsanitizer Project Htmlsanitizer 5.0.308 Htmlsanitizer Project Htmlsanitizer 5.0.310 Htmlsanitizer Project Htmlsanitizer 5.0.311 Htmlsanitizer Project Htmlsanitizer 5.0.313 Htmlsanitizer Project Htmlsanitizer 5.0.314 Htmlsanitizer Project Htmlsanitizer 5.0.316 Htmlsanitizer Project Htmlsanitizer 5.0.317 Htmlsanitizer Project Htmlsanitizer 5.0.319 Htmlsanitizer Project Htmlsanitizer 5.0.320 Htmlsanitizer Project Htmlsanitizer 5.0.322 Htmlsanitizer Project Htmlsanitizer 5.0.323 Htmlsanitizer Project Htmlsanitizer 5.0.325 Htmlsanitizer Project Htmlsanitizer 5.0.326 Htmlsanitizer Project Htmlsanitizer 5.0.328 Htmlsanitizer Project Htmlsanitizer 5.0.329 Htmlsanitizer Project Htmlsanitizer 5.0.331 Htmlsanitizer Project Htmlsanitizer 5.0.332 Htmlsanitizer Project Htmlsanitizer 5.0.341 Htmlsanitizer Project Htmlsanitizer 5.0.342 Htmlsanitizer Project Htmlsanitizer 5.0.343 Htmlsanitizer Project Htmlsanitizer 5.0.344 Htmlsanitizer Project Htmlsanitizer 5.0.346 Htmlsanitizer Project Htmlsanitizer 5.0.347 Htmlsanitizer Project Htmlsanitizer 5.0.349 Htmlsanitizer Project Htmlsanitizer 5.0.350 Htmlsanitizer Project Htmlsanitizer 5.0.352 Htmlsanitizer Project Htmlsanitizer 5.0.353 Htmlsanitizer Project Htmlsanitizer 5.0.354 Htmlsanitizer Project Htmlsanitizer 5.0.355 Htmlsanitizer Project Htmlsanitizer 5.0.358 Htmlsanitizer Project Htmlsanitizer 5.0.359 Htmlsanitizer Project Htmlsanitizer 5.0.361 Htmlsanitizer Project Htmlsanitizer 5.0.363 Htmlsanitizer Project Htmlsanitizer 5.0.364 Htmlsanitizer Project Htmlsanitizer 5.0.365 Htmlsanitizer Project Htmlsanitizer 5.0.366 Htmlsanitizer Project Htmlsanitizer 5.0.367 Htmlsanitizer Project Htmlsanitizer 5.0.368 Htmlsanitizer Project Htmlsanitizer 5.0.369 Htmlsanitizer Project Htmlsanitizer 5.0.371 Htmlsanitizer Project Htmlsanitizer 5.0.372 Htmlsanitizer Project Htmlsanitizer 5.0.373 Htmlsanitizer Project Htmlsanitizer 5.0.375 Htmlsanitizer Project Htmlsanitizer 5.0.376 Htmlsanitizer Project Htmlsanitizer 5.0.377 Htmlsanitizer Project Htmlsanitizer 5.0.379 Htmlsanitizer Project Htmlsanitizer 5.0.380 Htmlsanitizer Project Htmlsanitizer 5.0.382 Htmlsanitizer Project Htmlsanitizer 5.0.383 Htmlsanitizer Project Htmlsanitizer 5.0.385 Htmlsanitizer Project Htmlsanitizer 5.0.386 Htmlsanitizer Project Htmlsanitizer 5.0.388 Htmlsanitizer Project Htmlsanitizer 5.0.389 Htmlsanitizer Project Htmlsanitizer 5.0.391 Htmlsanitizer Project Htmlsanitizer 5.0.392 Htmlsanitizer Project Htmlsanitizer 5.0.395 Htmlsanitizer Project Htmlsanitizer 5.0.398 Htmlsanitizer Project Htmlsanitizer 5.0.400 Htmlsanitizer Project Htmlsanitizer 5.0.401 Htmlsanitizer Project Htmlsanitizer 5.0.403 Htmlsanitizer Project Htmlsanitizer 5.0.404 Htmlsanitizer Project Htmlsanitizer 6.0.409 Htmlsanitizer Project Htmlsanitizer 6.0.423 Htmlsanitizer Project Htmlsanitizer 6.0.430 Htmlsanitizer Project Htmlsanitizer 6.0.437 Htmlsanitizer Project Htmlsanitizer 6.0.441 Htmlsanitizer Project Htmlsanitizer 6.0.453 Htmlsanitizer Project Htmlsanitizer 7.0.470 Htmlsanitizer Project Htmlsanitizer 7.0.473 Htmlsanitizer Project Htmlsanitizer 7.1.475 Htmlsanitizer Project Htmlsanitizer 7.1.488 Htmlsanitizer Project Htmlsanitizer 7.1.509 Htmlsanitizer Project Htmlsanitizer 7.1.512 Htmlsanitizer Project Htmlsanitizer 7.1.542 Htmlsanitizer Project Htmlsanitizer 8.0.601 Htmlsanitizer Project Htmlsanitizer 8.0.645 Htmlsanitizer Project Htmlsanitizer 8.0.692 Htmlsanitizer Project Htmlsanitizer 8.0.718	201

Summary

Vulnerable Configurations

References