2 matches found
CVE-2019-15477
Jooby before 1.6.4 has XSS via the default error handler...
6.1CVSS6.1AI score
SaveExploits0References1
CVE-2019-15477
This CVE refers to Jooby, a modular Java/Kotlin web framework. The affected component is the framework’s default error handler, where a Cross-Site Scripting (XSS) vulnerability exists in Jooby versions prior to 1.6.4. The underlying issue is that user-controlled data could be reflected via error ...
6.1CVSS5.9AI score0.00984EPSS
SaveExploits1References1Affected Software1
20