| Package | Affected versions | Patched versions |
|---|---|---|
| net.bull.javamelody:javamelody-core | < 1.47.0 | 1.47.0 |
| javamelody | = 1.10= 1.11= 1.12= 1.13= 1.14= 1.15= 1.16= 1.17= 1.18= 1.19= 1.20= 1.21= 1.22= 1.23= 1.24= 1.25= 1.26= 1.27= 1.28= 1.29= 1.30= 1.31= 1.32= 1.32.1= 1.33= 1.34= 1.35= 1.36= 1.37= 1.38= 1.39= 1.40= 1.41= 1.42= 1.43= 1.44= 1.45= 1.6= 1.7= 1.8= 1.9≤ 1.46 |
Cross-site scripting (XSS) vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free