CVE-2018-12432
1 advisory.
Maven/net.bull.javamelody:javamelody-core CVE-2018-12432: medium 6.1, EPSS 0.70%
Cross-site Scripting in JavaMelody
Action: Upgrade net.bull.javamelody:javamelody-core to 1.61.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.61.0 | - |
Fixed versions
| 1.61.0 |
Sources
- osv: GHSA-g66q-grxc-64j3
- https://nvd.nist.gov/vuln/detail/CVE-2018-12432
- https://github.com/javamelody/javamelody/commit/e0497c1980acebd257d3da78dfde29ae9bdffdf6
- https://github.com/Hurdano/JavaMelody-XSS/wiki/Attack-Vector---JavaMelody
CVE-2018-12432 · published · modified · JSON