Improper Neutralization of Input During Web Page Generation in Jsoup

中危 6.1CVE-2015-6748 · GHSA-48rh-qgjr-xfj6 · Published 25/09/2017 · updated 08/10/2026

要点

Package	Affected versions	Patched versions
org.jsoup:jsoup Maven	`≥ 1.6.0, < 1.8.3`	`1.8.3`
jsoup jsoup	`≥ 1.6.0, < 1.8.3`	`1.8.3`

Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3.

NVD description

Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Maven

≥ 1.6.0, < 1.8.3

1.8.3

≥ 1.6.0, < 1.8.3

1.8.3

org.jsoup:jsoup 的其他漏洞

查看全部 →