← All advisories

Medium severity6.1NVD Advisory· Published Sep 25, 2017· Updated Jun 17, 2026

CVE-2015-6748

CVE-2015-6748

Description

Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.jsoup:jsoupMaven	>= 1.6.0, < 1.8.3	1.8.3

Affected products

3

jsoup/jsoup
cpe:2.3:a:jsoup:jsoup:*:*:*:*:*:*:*:*
Range: >=1.6.0,<1.8.3
Debian/linux
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
ghsa-coords
pkg:maven/org.jsoup/jsoup
Range: >= 1.6.0, < 1.8.3

Patches

Vulnerability mechanics

References

9

github.com/jhy/jsoup/pull/582nvdPatchThird Party AdvisoryWEB
www.securityfocus.com/bid/76504nvdBroken LinkThird Party AdvisoryVDB Entry
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party AdvisoryWEB
github.com/advisories/GHSA-48rh-qgjr-xfj6ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2015-6748ghsaADVISORY
www.openwall.com/lists/oss-security/2015/08/28/5nvdMailing ListWEB
hibernate.atlassian.net/browse/HV-1012nvdIssue TrackingWEB
issues.jboss.org/browse/WFLY-5223nvdIssue TrackingWEB
lists.debian.org/debian-lts-announce/2020/01/msg00021.htmlnvdMailing ListWEB

News mentions

0

No linked articles in our index yet.