A flaw was found in Jolokia versions from 1.2 to before 1.6.1.

Summary

A flaw was found in Jolokia versions from 1.2 to before 1.6.1. Affected versions are vulnerable to a system-wide CSRF. This holds true for properly configured instances with strict checking for origin and referrer headers. This could result in a Remote Code Execution attack.

Timeline

1. Aug 1, 2019, 1:27 PM UTCCVE published
2. Aug 5, 2024, 7:54 AM UTCRecord last updated

Affected versions

• jolokia jolokia

  1.6.1

• org.jolokia:jolokia-coreMaven

  From 1.2 · fixed in 1.6.1

References 11