Cross-Site Request Forgery in Jolokia

Cross-site request forgery CSRF vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page...

GHSA-FJHW-8222-G2HG Cross-Site Request Forgery in Jolokia

Cross-site request forgery CSRF vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page...

Cross-site Scripting in Jolokia agent

An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser...

GHSA-HFPG-GQJW-779M Cross-site Scripting in Jolokia agent

An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser...

Injection in Jolokia agent

A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server...

GHSA-RHQJ-4PP8-VVGF Injection in Jolokia agent

A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server...

Aiven Ltd: [Kafka Connect] [JdbcSinkConnector][HttpSinkConnector] RCE by leveraging file upload via SQLite JDBC driver and SSRF to internal Jolokia

Summary: The Aiven JDBC sink includes the SQLite JDBC Driver. This JDBC driver can be used to upload SQLite database files onto the server. The HTTP sink connector allows sending HTTP requests to localhost. There is unprotected Jolokia listening on localhost:6725. JMX exports the...

Jolokia Arbitrary File Read

Jolokia is a JMX-HTTP bridge giving an alternative to JSR-160 connectors. Jolokia includes a compilerDirectivesAdd action, which allows an unauthenticated attacker to read arbitrary files on the server. No source data...

Jolokia 1.3.7 < 1.5.0 Remote Code Execution

A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 1.5.0 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server. No source data...

Jolokia 1.3.7 < 1.5.0 Cross-Site Scripting

An XSS vulnerability exists in the Jolokia agent version 1.3.7 1.5.0 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser. No source data...

Jolokia XML External Entity

Jolokia is a JMX-HTTP bridge giving an alternative to JSR-160 connectors. Jolokia includes a reloadByURL action provided by the Logback library, that allows an attacker to reload the logging config from an external URL resulting in a XML External Entity XXE vulnerability. No source data...

Jolokia Unauthorized Command Execution Vulnerability

Jolokia is a jmx remote management project implemented via http and josn. Jolokia unauthorized command execution vulnerability can be exploited by attackers to gain control of the server...

CVE-2021-40684

Talend ESB Runtime in all versions from 5.1 to 7.3.1-R2021-09, 7.2.1-R2021-09, 7.1.1-R2021-09, has an unauthenticated Jolokia HTTP endpoint which allows remote access to the JMX of the runtime container, which would allow an attacker the ability to read or modify the container or software running...

CVE-2021-40684

Talend ESB Runtime in all versions from 5.1 to 7.3.1-R2021-09, 7.2.1-R2021-09, 7.1.1-R2021-09, has an unauthenticated Jolokia HTTP endpoint which allows remote access to the JMX of the runtime container, which would allow an attacker the ability to read or modify the container or software running...

Design/Logic Flaw

Talend ESB Runtime in all versions from 5.1 to 7.3.1-R2021-09, 7.2.1-R2021-09, 7.1.1-R2021-09, has an unauthenticated Jolokia HTTP endpoint which allows remote access to the JMX of the runtime container, which would allow an attacker the ability to read or modify the container or software running...

CVE-2021-40684

CVE-2021-40684 affects Talend ESB Runtime across versions 5.1–7.3.1-R2021-09, 7.2.1-R2021-09, and 7.1.1-R2021-09, due to an unauthenticated Jolokia HTTP endpoint that exposes the container’s JMX. This endpoint enables remote read/write access to the runtime/container and could allow an attacker t...

CVE-2021-40684

Talend ESB Runtime in all versions from 5.1 to 7.3.1-R2021-09, 7.2.1-R2021-09, 7.1.1-R2021-09, has an unauthenticated Jolokia HTTP endpoint which allows remote access to the JMX of the runtime container, which would allow an attacker the ability to read or modify the container or software running...

Talend ESB 授权问题漏洞

Talend ESB is a reliable and scalable Enterprise Service Bus ESB from Talend, Inc. that enables development teams to manage integration projects in a holistic manner, combining application and data management integration in complex heterogeneous computing environments. A security vulnerability...

ALEA-2020:1718 jolokia-jvm-agent bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

jolokia-jvm-agent bug fix and enhancement update

An update is available for jolokia-jvm-agent. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...