Skip to content
OpenAdvisories

Package · Maven

org.jooby:jooby

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2020-7647

    path traversal in Jooby

    All versions before 1.6.7 and all versions after 2.0.0 inclusive and before 2.8.2 of io.jooby:jooby and org.jooby:jooby are vulnerable to Directory Traversal via two separate vectors.

    org.jooby:jooby io.jooby:jooby Maven
  • Medium 6.1
    CVE-2019-15477 Public exploit

    Cross-site Scripting in Jooby

    Jooby before 1.6.4 has XSS via the default error handler.

    org.jooby:jooby Maven