| Package | Affected versions | Patched versions |
|---|---|---|
| org.jolokia:jolokia-core | ≥ 1.3.7, < 1.5.0 | 1.5.0 |
| webarchive agent | = 1.3.7 |
A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free