Medium: jsoup

🗓️ 19 Feb 2024 00:00:00Reported by AmazonType

jsoup may allow cross site scripting via javascript links; upgrade to 1.15.3 or disable preserveRelativeLinks and apply a content security policy.

Reporter	Title	Published	Views	Family All 94
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics is affected but not classified as vulnerable to multiple vulnerabilities	28 Jul 202301:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Workload Scheduler potentially affected by jsoup XSS attacks (CVE-2022-36033)	30 Jan 202317:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including remote code execution in Apache Commons Text 1.9	8 Dec 202204:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	5 Dec 202219:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found with third-party libraries used by IBM® MobileFirst Platform	17 Feb 202315:44	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in jsoup used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2022-36033)	4 Apr 202320:41	–	ibm
IBM Security Bulletins	Security Bulletin: There is a security vulnerability in jsoup used by IBM Maximo Asset Management (CVE-2022-36033)	8 Jun 202302:31	–	ibm
Tenable Nessus	Amazon Linux 2023 : jsoup, jsoup-javadoc (ALAS2023-2023-315)	24 Aug 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : jsoup (ALAS-2024-2466)	19 Feb 202400:00	–	nessus
Tenable Nessus	Oracle Business Process Management Suite (Apr 2023 CPU)	19 Apr 202300:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Amazon Linux	2	any	jsoup	1.6.1-10.amzn2.0.1	jsoup-1.6.1-10.amzn2.0.1.noarch.rpm
Amazon Linux	2	any	jsoup-javadoc	1.6.1-10.amzn2.0.1	jsoup-javadoc-1.6.1-10.amzn2.0.1.noarch.rpm