Improper Neutralization of Input During Web Page Generation in Jsoup

MEDIO 6.1CVE-2015-6748 · GHSA-48rh-qgjr-xfj6 · Published 25/09/2017 · updated 08/10/2026

En resumen

CVE-2015-6748 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a org.jsoup:jsoup, jsoup (jsoup).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.2%, mayor que el 82.5% de las vulnerabilidades.
Solución: actualizar a 1.8.3 o posterior.

Package	Affected versions	Patched versions
org.jsoup:jsoup Maven	`≥ 1.6.0, < 1.8.3`	`1.8.3`
jsoup jsoup	`≥ 1.6.0, < 1.8.3`	`1.8.3`

Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3.

NVD description

Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Maven

≥ 1.6.0, < 1.8.3

1.8.3

≥ 1.6.0, < 1.8.3

1.8.3

Más vulnerabilidades de org.jsoup:jsoup

Ver todo →