{"action":"Upgrade net.bull.javamelody:javamelody-core to 1.61.0 or later.","affected":[{"fixed":"1.61.0","introduced":"0"}],"component":"net.bull.javamelody:javamelody-core","cve_ids":["CVE-2018-12432"],"ecosystem":"Maven","epss":0.00696,"exploited":false,"fixed_versions":["1.61.0"],"ghsa_id":"GHSA-g66q-grxc-64j3","id":"tcs_01M5N8XHD3TGAA0TYAC7EACXV0","modified_at":"2026-09-10T03:49:33.648602121Z","published_at":"2022-05-14T03:10:57Z","references":["https://osv.dev/vulnerability/GHSA-g66q-grxc-64j3","https://nvd.nist.gov/vuln/detail/CVE-2018-12432","https://github.com/javamelody/javamelody/commit/e0497c1980acebd257d3da78dfde29ae9bdffdf6","https://github.com/Hurdano/JavaMelody-XSS/wiki/Attack-Vector---JavaMelody"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-g66q-grxc-64j3","url":"https://osv.dev/vulnerability/GHSA-g66q-grxc-64j3"}],"summary":"Cross-site Scripting in JavaMelody"}