Description
Characters in the GET url path are not properly escaped and can be reflected in the server response.
Remediation
References
https://snyk.io/vuln/SNYK-JS-IOBROKERWEB-534971
Related Vulnerabilities
CVE-2020-11023 Vulnerability in maven package org.webjars.npm:jquery
CVE-2021-23771 Vulnerability in npm package argencoders-notevil
CVE-2022-25858 Vulnerability in maven package org.webjars.npm:terser
CVE-2020-5397 Vulnerability in maven package org.springframework:spring-webmvc
CVE-2017-3586 Vulnerability in maven package mysql:mysql-connector-java