| Package | Affected versions | Patched versions |
|---|---|---|
| net.bull.javamelody:javamelody-core | < 1.74.0 | 1.74.0 |
| javamelody | < 1.74.0 | 1.74.0 |
JavaMelody before 1.74.0 has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free