CVE:CVE-2011-4457
CNNVD:CNNVD-201111-314
OWASP HTML Sanitizer (也称为owasp-java-html-sanitizer) 88之前的版本在JavaScript禁用时存在漏洞。用户协助的远程攻击者可借助特制的NOSCRIPT要素中的FORM要素获得潜在的敏感信息。
solution:Upgrade owasp-java-html-sanitizer_project owasp-java-html-sanitizer to a higher version than 83,42,48,50,74,and avoid the version (,83],42,48,50,74