grails-javamelody-sample-app

Grails Javamelody Sample App Grails sample application using the Javamelody plugin version 1.44 to illustrate the CVE-2013-4378 vulnerability...

CVE-2013-4378

Cross-site scripting XSS vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header...

net.bull.javamelody:javamelody-collector-server (1.9.3), net.bull.javamelody:javamelody-spring-boot-starter (1.9.3) +1 more potentially affected by CVE-2013-4378 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.46.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =1.8.1, =1.46.0 Source cves: CVE-2013-4378 Source advisory: OSV:GHSA-P4MX-P49M-8RW4...

net.bull.javamelody:javamelody-collector-server (1.9.3), net.bull.javamelody:javamelody-spring-boot-starter (1.9.3) +1 more potentially affected by CVE-2013-4378 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.46.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =1.8.1, =1.46.0 Source cves: CVE-2013-4378 Source advisory: MEND:CVE-2013-4378...

CVE-2013-4378

CVE-2013-4378 describes a cross-site scripting (XSS) vulnerability in HtmlSessionInformationsReport.java of JavaMelody 1.46 and earlier. The underlying issue is injection of arbitrary web script or HTML via a crafted X-Forwarded-For header, enabling an attacker to influence pages rendered to othe...