Vulnerability in N/a
CVE-2018-1000129
An XSS vulnerability exists in the Jolokia agent version 1.3.7 in the HTTP servlet that allows an attacker to execute malicious javascript in the victim's browser.
EPSS: 0.768 (99.0th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- github.com/rhuss/jolokia/commit/5895d5c137c335e6b473e9dcb9baf748851bbc5f (x_refsource_CONFIRM)
- RHSA-2018:3817 (x_refsource_REDHAT, vendor-advisory)
- jolokia.org/ (x_refsource_CONFIRM)
- RHSA-2018:2669 (x_refsource_REDHAT, vendor-advisory)
Frequently asked questions
- What is CVE-2018-1000129?
- CVE-2018-1000129 is a vulnerability in N/a. Published 2018-03-14.
- Is CVE-2018-1000129 known to be exploited?
- 19 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.