182 matches found
MGASA-2015-0340 Updated jsoup package fixes security vulnerability
Jsoup before 1.8.3 was vulnerable to a possible XSS issue in the validator, related to how it handled tags without a closing '' when reaching EOF CVE-2015-6748...
6.1CVSS5.8AI score0.02195EPSS
SaveExploits0References3
PT-2015-3451 · Jsoup +1 · Jsoup +1
Name of the Vulnerable Software and Affected Versions: jsoup versions prior to 1.8.3 Description: The issue is related to a lack of protection for the structure of web pages, which can be exploited to perform cross-site scripting XSS attacks. This allows a remote attacker to carry out XSS attacks...
6.4CVSS7.3AI score0.02195EPSS
SaveExploits0References29
20