Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2020-7647

All versions before 1.6.7 and all versions after 2.0.0 inclusive and before 2.8.2 of io.jooby:jooby and org.jooby:jooby are vulnerable to Directory Traversal via two separate vectors.

CVSS 3.1 · 5.3 Medium EPSS 1.6% KEV · Not listed
Vendors
Jooby
Products
Jooby
CVE-2020-7622

HTTP Response Splitting

This affects the package io.jooby:jooby-netty before 1.6.9, from 2.0.0 and before 2.2.1. The DefaultHttpHeaders is set to false which means it does not validates that the header isn't being abused for HTTP Response Splitting.

CVSS 3.1 · 6.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Jooby
Products
Jooby
CVE-2019-15477

Jooby before 1.6.4 has XSS via the default error handler.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Jooby
Products
Jooby