MEDIUM6.1
GHSA-g66q-grxc-64j3
Cross-site Scripting in JavaMelody
Quick fix
GHSA-g66q-grxc-64j3 — net.bull.javamelody:javamelody-core: upgrade to the fixed version with the command below.
# pom.xml: bump <version>1.61.0</version> for net.bull.javamelody:javamelody-coreDetails
JavaMelody through 1.60.0 has XSS via the counter parameter in a clear_counter action to the /monitoring URI.
Are you affected?
Enter the version of the package you're using.
Affected packages
Maven/net.bull.javamelody:javamelody-core
Introduced in:
0Fixed in: 1.61.0Fix
# pom.xml: bump <version>1.61.0</version> for net.bull.javamelody:javamelody-core