Improper Neutralization of Input During Web Page Generation in Jsoup

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2015-6748 · ADVISORY
• jhy/jsoup#582 · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• hibernate.atlassian.net/browse/HV-1012 · WEB
• issues.jboss.org/browse/WFLY-5223 · WEB
• lists.debian.org/debian-lts-announce/2020/01/msg00021.html · WEB
• openwall.com/lists/oss-security/2015/08/28/5 · WEB
• securityfocus.com/bid/76504 · Broken Link

org.jsoup:jsoup のその他の脆弱性

• CVE-2026-75140高 7.5jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows rem…
• CVE-2026-71497中 4.7jsoup is a Java library for working with real-world HTML. From 1.14.3 until 1.23.1, jsoup's HTML parser could incorrectly handle a malformed…
• CVE-2022-36033中 6.1jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting (XSS) safety. jsoup may incorrectly saniti…
• CVE-2021-37714高 7.5jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable t…