CVE-2013-4378

Cross-site scripting (XSS) vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header.

🔗 References (12)

• secalert@redhathttp://osvdb.org/97778
• secalert@redhathttp://seclists.org/oss-sec/2013/q3/679
• secalert@redhathttp://www.securityfocus.com/bid/62679
• secalert@redhathttps://code.google.com/p/javamelody/issues/detail?id=346
• secalert@redhathttps://code.google.com/p/javamelody/source/detail?r=3515
• secalert@redhathttps://code.google.com/p/javamelody/wiki/ReleaseNotes
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/97778
• af854a3a-2127-422b-91ae-364da2661108http://seclists.org/oss-sec/2013/q3/679
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/62679
• af854a3a-2127-422b-91ae-364da2661108https://code.google.com/p/javamelody/issues/detail?id=346
• af854a3a-2127-422b-91ae-364da2661108https://code.google.com/p/javamelody/source/detail?r=3515
• af854a3a-2127-422b-91ae-364da2661108https://code.google.com/p/javamelody/wiki/ReleaseNotes