Description
Jooby before 1.6.4 has XSS via the default error handler.
Remediation
References
https://github.com/jooby-project/jooby/pull/1368
Related Vulnerabilities
CVE-2021-27906 Vulnerability in maven package org.apache.pdfbox:pdfbox
CVE-2017-1000043 Vulnerability in maven package org.webjars.npm:mapbox.js
CVE-2022-29002 Vulnerability in maven package com.xuxueli:xxl-job
CVE-2022-36915 Vulnerability in maven package org.jenkins-ci.plugins:android-signing
CVE-2022-45397 Vulnerability in maven package org.jenkins-ci.plugins:osf-builder-suite-xml-linter