GitHub Advisoryadvisory · Maven

GHSA-hfpg-gqjw-779m Cross-site Scripting in Jolokia agent

MEDIUM Published 2022-05-14 Modified 2022-06-30 Official page ↗
Aliases
CVE-2018-1000129
Ecosystem
Maven
Packages
org.jolokia:jolokia-core
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2022-06-30

Affected packages

• Maven org.jolokia:jolokia-core: >= 1.3.7, < 1.5.0 → fixed in 1.5.0

Description

An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser.

Related

Alias · CVE (1)

  • CVE-2018-1000129 An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References