CVE-2015-6748 Improper Neutralization of Input During Web Page Generation in Jsoup
MediumCVSS 6.1
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.jsoup/jsoup(Maven) | >= 1.6.0, < 1.8.3 | 1.8.3 |
| org.jsoup/jsoup(Maven) | = 1.6.0 | No fix listed |
| org.jsoup/jsoup(Maven) | = 1.6.1 | No fix listed |
| org.jsoup/jsoup(Maven) | = 1.6.2 | No fix listed |
| org.jsoup/jsoup(Maven) | = 1.6.3 | No fix listed |
| org.jsoup/jsoup(Maven) | = 1.7.1 | No fix listed |
| org.jsoup/jsoup(Maven) | = 1.7.2 | No fix listed |
| org.jsoup/jsoup(Maven) | = 1.7.3 | No fix listed |
| org.jsoup/jsoup(Maven) | = 1.8.1 | No fix listed |
| org.jsoup/jsoup(Maven) | = 1.8.2 | No fix listed |
| org.jsoup/jsoup(Maven) | >= 1.6.0, <= 1.8.2 | No fix listed |
| debian/jsoup(Debian:12) | < 1.8.3-1 | 1.8.3-1 |
| debian/jsoup(Debian:13) | < 1.8.3-1 | 1.8.3-1 |
| debian/jsoup(Debian:14) | < 1.8.3-1 | 1.8.3-1 |
| jsoup | >= 1.6.0, < 1.8.3 | 1.8.3 |
| debian linux | = 8.0 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch third-party-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- hibernate.atlassian.net issue-tracking
- issues.jboss.org issue-tracking
- [debian-lts-announce] 20200126 [SECURITY] [DLA 2075-1] jsoup security update mailing-list
- [oss-security] 20150828 Re: CVE request: XSS vulnerability in jsoup related to incomplete tags at EOF mailing-list
- github.com
- Debian Security Tracker CVE-2015-6748 vendor-advisory
- 76504 broken-link third-party-advisory vdb-entry
- bugs.debian.org issue-tracking