CVE-2019-15477

Jooby before 1.6.4 has XSS via the default error handler...

Default credentials

Jooby before 1.6.4 has XSS via the default error handler...

CVE-2019-15477

Jooby before 1.6.4 has XSS via the default error handler...

CVE-2019-15477

Jooby before 1.6.4 has XSS via the default error handler...

CVE-2019-15477

This CVE refers to Jooby, a modular Java/Kotlin web framework. The affected component is the framework’s default error handler, where a Cross-Site Scripting (XSS) vulnerability exists in Jooby versions prior to 1.6.4. The underlying issue is that user-controlled data could be reflected via error ...

CVE-2019-15477: Improper Neutralization of Input During Web Page Generation

Jooby before 1.6.4 has XSS via the default error handler...

PT-2019-14206

Name of the Vulnerable Software and Affected Versions Jooby versions prior to 1.6.4 Description The issue is related to a security problem where an attacker can execute malicious scripts on a user's browser, potentially leading to unauthorized actions. Recommendations For versions prior to 1.6.4,...