Lucene search
Veracode Vulnerability DatabaseVERACODE:36847HistoryAug 30, 2022 - 7:07 a.m.
Cross-site Scripting (XSS)
2022-08-3007:07:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
42
jsoup
vulnerability
resolve function
cross-site scripting
safelist
preserverelativelinks
arbitrary javascript
0.001 Low
EPSS
Percentile
44.5%
jsoup is vulnerable to cross-site scripting. The vulnerability exists in resolve function in StringUtil.java because the jsoup cleaner is not properly sanitized when SafeList.preserveRelativeLinks is enabled which allows an attacker to inject and execute arbitrary javascript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jsoup java html parser | le | 1.11.3 | |
| jsoup java html parser | le | 1.15.2 | |
| jsoup java html parser | le | 1.11.3 | |
| jsoup java html parser | le | 1.15.2 |
Related
amazon
amazon
Medium: jsoup
2024-02-15 03:52:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:4011-1)
2022-11-17 00:00:00
ibm
ibm
nessus
nessus
SUSE SLED15 / SLES15 Security Update : jsoup (SUSE-SU-2022:4011-1)
2022-11-17 00:00:00
RHEL 9 : jsoup (Unpatched Vulnerability)
2024-06-03 00:00:00
Amazon Linux 2023 : jsoup, jsoup-javadoc (ALAS2023-2023-315)
2023-08-24 00:00:00
redhatcve
redhatcve
CVE-2022-36033
2022-09-15 10:13:18
debiancve
debiancve
CVE-2022-36033
2022-08-29 17:15:08
github
github
nvd
nvd
CVE-2022-36033
2022-08-29 17:15:08
ubuntucve
ubuntucve
CVE-2022-36033
2022-08-29 00:00:00
cgr
cgr
CVE-2022-36033 vulnerabilities
2024-05-19 03:07:16
prion
prion
Cross site scripting
2022-08-29 17:15:00
osv
osv
CVE-2022-36033
2022-08-29 17:15:08
cve
cve
CVE-2022-36033
2022-08-29 17:15:08
cbl_mariner
cbl_mariner
CVE-2022-36033 affecting package jsoup 1.11.3-3
2024-07-05 21:08:40
cvelist
cvelist
wolfi
wolfi
CVE-2022-36033 vulnerabilities
2024-07-05 21:08:40
oracle
oracle
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00