CSRF in Jolokia

CVE-2014-0168

Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.007 (50.9th percentile) — read the EPSS interpretation.

Affected products

  • Jolokia — versions 1.0.0, 1.0.1, 1.0.2
  • N/a — versions n/a

Weakness classification (CWE)

References