CVE-2015-6748

Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3.

Score

CVSS 3.1 6.1 Medium

Status

Modified - secalert@redhat.com

Published

2017-09-25

Last modified

2026-10-08

Weaknesses

CWE-79

Affected products

• Debian Linux (Debian)
• Jsoup (Jsoup)

References

• http://www.openwall.com/lists/oss-security/2015/08/28/5
• https://bugzilla.redhat.com/show_bug.cgi?id=1258310
• https://hibernate.atlassian.net/browse/HV-1012
• http://www.securityfocus.com/bid/76504
• https://github.com/jhy/jsoup/pull/582
• https://issues.jboss.org/browse/WFLY-5223?_sscc=t
• https://lists.debian.org/debian-lts-announce/2020/01/msg00021.html