| Package | Affected versions | Patched versions |
|---|---|---|
| net.bull.javamelody:javamelody-core | < 1.61.0 | 1.61.0 |
| javamelody | ≤ 1.60.0 |
JavaMelody through 1.60.0 has XSS via the counter parameter in a clear_counter action to the /monitoring URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free