← All advisories

Medium severity6.1NVD Advisory· Published Aug 23, 2019· Updated Jun 17, 2026

CVE-2019-15477

CVE-2019-15477

Description

Jooby before 1.6.4 has XSS via the default error handler.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.jooby:joobyMaven	< 1.6.4	1.6.4

Affected products

3

Jooby/Jooby
cpe:2.3:a:jooby:jooby:*:*:*:*:*:*:*:*
Range: <1.6.4
Jooby/Joobydescription
ghsa-coords
pkg:maven/org.jooby/jooby
Range: < 1.6.4

Patches

Vulnerability mechanics

References

4

github.com/jooby-project/jooby/pull/1368nvdExploitIssue TrackingPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-f5f4-m7qp-w6gcghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-15477ghsaADVISORY
github.com/jooby-project/jooby/commit/34856a738829d8fedca4ed27bd6ff413af87186fghsaWEB

News mentions

0

No linked articles in our index yet.