grails-javamelody-sample-app

Grails Javamelody 샘플 앱 Grails 샘플 애플리케이션은 Javamelody 플러그인버전 1.44을 사용하여 CVE-2013-4378 취약점을 보여줍니다...

CVE-2013-4378

Cross-site scripting XSS vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header...

CVE-2013-4378

CVE-2013-4378 describes a cross-site scripting (XSS) vulnerability in HtmlSessionInformationsReport.java of JavaMelody 1.46 and earlier. The underlying issue is injection of arbitrary web script or HTML via a crafted X-Forwarded-For header, enabling an attacker to influence pages rendered to othe...