GitHub Advisoryadvisory · Maven

GHSA-fjhw-8222-g2hg Cross-Site Request Forgery in Jolokia

MEDIUM Published 2022-05-17 Modified 2022-07-07 Official page ↗
Aliases
CVE-2014-0168
Ecosystem
Maven
Packages
org.jolokia:jolokia-core
Severity
Moderate
Weaknesses
CWE-352
Reviewed
2022-07-07

Affected packages

• Maven org.jolokia:jolokia-core: < 1.2.1 → fixed in 1.2.1

Description

Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.

Related

Alias · CVE (1)

  • CVE-2014-0168 Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for… vulnerability

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References