Cross-site Scripting (XSS)

Overview net.bull.javamelody:javamelody-core is a JavaEE application monitoring module. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the graph parameter in the /monitoring endpoint. An attacker can execute arbitrary JavaScript in a victim's browser by supplying...