-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jsoup:jsoup | maven | >= 1.6.0, <= 1.8.2 | 1.8.3 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from jsoup's HTML parser failing to properly handle input ending with unclosed tags. The core issue resides in the HTML tree building process (HtmlTreeBuilder) where token processing didn't account for EOF edge cases. Runtime detection would observe the parser's token processing (HtmlTreeBuilder.process) and fragment parsing entry points (Parser.parseFragment) when exploiting XSS via malformed HTML input. The patch in PR #582 specifically modifies these parsing behaviors to address incomplete tag handling.
A Semantic Attack on Google Gemini - Read the Latest Research