Jolokia Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2018-1000129 - Vulnerability Database
Jolokia Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2018-1000129
Medium
Reference:
CVE-2018-1000129
Title:
Jolokia Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Overview:
An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim39s browser.