PT-2005-2615 · Owasp · Safehtml

Published 2005-05-17 · Updated 2008-09-05 · CVE-2005-1638

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SafeHTML versions prior to 1.3.2

Description The issue concerns the writeAttrs function, which fails to properly handle quotes in attribute values. This could allow remote attackers to exploit cross-site scripting (XSS) vulnerabilities in applications that rely on SafeHTML for protection.

Recommendations For versions prior to 1.3.2, update to version 1.3.2 or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-1638

Affected Products

Safehtml

References · 4

• http://pixel-apes.com/safehtml/feed · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-1638 · Security Note
• http://osvdb.org/16612 · Note
• http://secunia.com/advisories/15371 · Note