Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

net.bull.javamelody:javamelody-core

3 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3
Registry
Maven Central

Advisories 3

  • JavaMelody before 1.74.0 has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java.

    Affected: fixed in 1.74.0.

  • JavaMelody through 1.60.0 has XSS via the counter parameter in a clear_counter action to the /monitoring URI.

    Affected: fixed in 1.61.0.

  • Cross-site scripting (XSS) vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to…

    Affected: fixed in 1.47.0.