Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6801
HistoryJun 18, 2018 - 2:54 a.m.

Cross-site Scripting (XSS)

2018-06-1802:54:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

EPSS

0.001

Percentile

38.0%

javamelody-core is vulnerable to cross-site scripting (XSS) attacks. The vulnerability exists due to the lack of sanitization in the counter parameter when performing the clear_counter action through the /monitoring URI, causing XSS attacks.

EPSS

0.001

Percentile

38.0%

Related for VERACODE:6801