Junglewise Threat Intelligence

CVE-2022-36033: jsoup may not sanitize code injection XSS attempts if SafeList.preserveRelativeLinks is enabled

CVE-2022-36033 · Severity: low · CVSS 3.1 · Published 2022-09-01

Technologies: org.jsoup:jsoup (Maven). Vendors: Maven.

Executive brief

jsoup may not sanitize code injection XSS attempts if SafeList.preserveRelativeLinks is enabled

Affected products

  • Maven org.jsoup:jsoup

Related threats