GHSA-hfpg-gqjw-779mMediumCVSS 6.1

Cross-site Scripting in Jolokia agent

Published
May 14, 2022
Last Modified
January 27, 2023

🔗 CVE IDs covered (1)

CVE-2018-1000129 →

📋 Description

An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser.

🎯 Affected products1

  • maven/org.jolokia:jolokia-core:>= 1.3.7, < 1.5.0

🔗 References (7)