GitHub Advisoryadvisory · Maven

GHSA-qpr7-5m63-hq2c Improper Neutralization of Input During Web Page Generation in JAMon

MEDIUM Published 2022-05-14 Modified 2022-07-07 Official page ↗
Aliases
CVE-2013-6235
Ecosystem
Maven
Packages
com.jamonapi:jamon
Severity
Moderate
Weaknesses
CWE-79
Reviewed
2022-07-07

Affected packages

• Maven com.jamonapi:jamon: < 2.80 → fixed in 2.80

Description

Multiple cross-site scripting (XSS) vulnerabilities in JAMon (Java Application Monitor) 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) listenertype or (2) currentlistener parameter to mondetail.jsp or ArraySQL parameter to (3) mondetail.jsp, (4) jamonadmin.jsp, (5) sql.jsp, or (6) exceptions.jsp.

Related

Alias · CVE (1)

  • CVE-2013-6235 Multiple cross-site scripting (XSS) vulnerabilities in JAMon (Java Application Monitor) 2.7 and earlier allow remote attackers to inject… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References