| Package | Affected versions | Patched versions |
|---|---|---|
| net.bull.javamelody:javamelody-core | < 1.61.0 | 1.61.0 |
JavaMelody is a monitoring tool for JavaEE applications. Versions prior to 1.61.0 are vulnerable to a cross-site scripting (XSS) attack. This issue was patched in version 1.61.0, and users are recommended to upgrade to the latest version. There are no known workarounds.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free