CVE:CVE-2021-42575
CNNVD:CNNVD-202110-1259
Sanitize是美国Ryan Grove个人开发者的一款HTML和CSS清理器，它支持从字符串中删除HTML和CSS等。
Sanitizer 存在输入验证错误漏洞，该漏洞源于20211018.1 之前的 OWASP Java HTML Sanitizer 没有正确执行与 SELECT、STYLE 和 OPTION 元素相关的策略。
solution:Upgrade owasp java_html_sanitizer to a higher version than 20211018.2,and avoid the version (,20211018.2); Upgrade oracle middleware_common_libraries_and_tools to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle primavera_unifier to a higher version than 17.12,18.8,19.12,20.12,21.12,and avoid the version [17.7,17.12],18.8,19.12,20.12,21.12