| Package | Affected versions | Patched versions |
|---|---|---|
| org.jolokia:jolokia-core | ≥ 1.3.7, < 1.5.0 | 1.5.0 |
| jolokia | = 1.3.7 |
An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free