CVE-2018-12432: Improper Neutralization of Input During Web Page Generation

JavaMelody through 1.60.0 has XSS via the counter parameter in a clearcounter action to the /monitoring URI...

PT-2018-11168

Name of the Vulnerable Software and Affected Versions JavaMelody versions prior to 1.60.1 Description The issue allows for XSS via the counter parameter in a clear counter action to the "/monitoring" API endpoint. Recommendations For JavaMelody versions prior to 1.60.1, update to version 1.60.1 o...

CVE-2013-4378

Cross-site scripting XSS vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header...

CVE-2013-4378

Cross-site scripting XSS vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header...

CVE-2013-4378

CVE-2013-4378 describes a cross-site scripting (XSS) vulnerability in HtmlSessionInformationsReport.java of JavaMelody 1.46 and earlier. The underlying issue is injection of arbitrary web script or HTML via a crafted X-Forwarded-For header, enabling an attacker to influence pages rendered to othe...

net.bull.javamelody:javamelody-collector-server (1.9.3), net.bull.javamelody:javamelody-spring-boot-starter (1.9.3) +1 more potentially affected by CVE-2013-4378 via net.bull.javamelody:javamelody-core (>=1.8.1, <=1.46.0)

net.bull.javamelody:javamelody-core MAVEN version =1.8.1, =1.8.1, =1.46.0 Source cves: CVE-2013-4378 Source advisory: MEND:CVE-2013-4378...

CVE-2013-4378

Cross-site scripting XSS vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header...

CVE-2013-4378: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header...

PT-2013-4983

Name of the Vulnerable Software and Affected Versions JavaMelody versions 1.46 and earlier Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header. Recommendations For JavaMelody versions 1.46 and...