Cross-site scripting (XSS) vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-79,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| emeric_vernat | javamelody | 1.22 |
| emeric_vernat | javamelody | 1.32.1 |
| emeric_vernat | javamelody | 1.33 |
| emeric_vernat | javamelody | 1.16 |
| emeric_vernat | javamelody | 1.18 |
| emeric_vernat | javamelody | 1.39 |
| emeric_vernat | javamelody | 1.28 |
| emeric_vernat | javamelody | 1.29 |
| emeric_vernat | javamelody | 1.10 |
| emeric_vernat | javamelody | 1.14 |
| emeric_vernat | javamelody | 1.42 |
| emeric_vernat | javamelody | 1.45 |
| emeric_vernat | javamelody | 1.15 |
| emeric_vernat | javamelody | 1.41 |
| emeric_vernat | javamelody | 1.6 |
| emeric_vernat | javamelody | 1.37 |
| emeric_vernat | javamelody | 1.19 |
| emeric_vernat | javamelody | 1.13 |
| emeric_vernat | javamelody | 1.20 |
| emeric_vernat | javamelody | 1.17 |
| emeric_vernat | javamelody | 1.31 |
| emeric_vernat | javamelody | 1.36 |
| emeric_vernat | javamelody | 1.8 |
| emeric_vernat | javamelody | 1.23 |
| emeric_vernat | javamelody | 1.35 |
| emeric_vernat | javamelody | * |
| emeric_vernat | javamelody | 1.21 |
| emeric_vernat | javamelody | 1.25 |
| emeric_vernat | javamelody | 1.11 |
| emeric_vernat | javamelody | 1.43 |
| emeric_vernat | javamelody | 1.30 |
| emeric_vernat | javamelody | 1.27 |
| emeric_vernat | javamelody | 1.12 |
| emeric_vernat | javamelody | 1.32 |
| emeric_vernat | javamelody | 1.26 |
| emeric_vernat | javamelody | 1.9 |
| emeric_vernat | javamelody | 1.40 |
| emeric_vernat | javamelody | 1.7 |
| emeric_vernat | javamelody | 1.38 |
| emeric_vernat | javamelody | 1.44 |
| emeric_vernat | javamelody | 1.24 |
| emeric_vernat | javamelody | 1.34 |