CVE catalog

CVE-2016-10006

libowasp-antisamy-java: CVE-2016-10006

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
2.35% · Oct 25, 2026

In OWASP AntiSamy before 1.5.5, by submitting a specially crafted input (a tag that supports style with active content), you could bypass the library protections and supply executable code. The impact is XSS.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibowasp-antisamy-javasid1.7.8-1fixed
Debianlibowasp-antisamy-javaforky1.7.4-1fixed
Debianlibowasp-antisamy-javatrixie1.7.4-1fixed
Debianlibowasp-antisamy-javabookworm1.5.3+dfsg-1.1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibowasp-antisamy-javasourcesid1.7.4-1not yet assignedNot reported[1014981]
Debianlibowasp-antisamy-javasourceforky1.7.4-1not yet assignedNot reported[1014981]
Debianlibowasp-antisamy-javasourcetrixie1.7.4-1not yet assignedNot reported[1014981]
Debianlibowasp-antisamy-javasourcebookworm(unfixed)not yet assignedNot reported[1014981]

[Debian bug #1014981]

Notes

[bookworm] libowasp-antisamy-java: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libowasp-antisamy-java]Affected
    Details (2)

    • 1.5.3+dfsg-1.1 · all · bookworm

      Affected

      dsa · libowasp-antisamy-java · debian · bookworm; dsa · libowasp-antisamy-java · debian · 12

    • 1.5.3+dfsg-1.1 · all · bookworm

      Affected

      dsa · libowasp-antisamy-java · debian · bookworm; dsa · libowasp-antisamy-java · debian · 12

  • [libowasp-antisamy-java-doc]Affected

    Source package: [libowasp-antisamy-java]

    Details (2)

    • 1.5.3+dfsg-1.1 · all · bookworm

      Affected

      dsa · libowasp-antisamy-java · debian · bookworm; dsa · libowasp-antisamy-java · debian · 12

    • 1.5.3+dfsg-1.1 · all · bookworm

      Affected

      dsa · libowasp-antisamy-java · debian · bookworm; dsa · libowasp-antisamy-java · debian · 12

[Debian 13 (Trixie)]

  • [libowasp-antisamy-java]Fixed
    Details (2)

    • 1.7.4-1 · all · trixie

      Fixed · Fixed: 1.7.4-1

      dsa · libowasp-antisamy-java · debian · 13

    • 1.7.4-1 · all · trixie

      Fixed · Fixed: 1.7.4-1

      dsa · libowasp-antisamy-java · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]