GHSA-qpr7-5m63-hq2cMedium

Improper Neutralization of Input During Web Page Generation in JAMon

Published
May 14, 2022
Last Modified
January 27, 2023

🔗 CVE IDs covered (1)

CVE-2013-6235 →

📋 Description

Multiple cross-site scripting (XSS) vulnerabilities in JAMon (Java Application Monitor) 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) listenertype or (2) currentlistener parameter to mondetail.jsp or ArraySQL parameter to (3) mondetail.jsp, (4) jamonadmin.jsp, (5) sql.jsp, or (6) exceptions.jsp.

🎯 Affected products1

  • maven/com.jamonapi:jamon:< 2.80

🔗 References (10)