Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2014-0168

Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
jolokia / jolokia 1.1.0 1.1.0.x
jolokia / jolokia - 1.2.0.x
jolokia / jolokia 1.0.1 1.0.1.x
jolokia / jolokia 1.1.5 1.1.5.x
jolokia / jolokia 1.1.3 1.1.3.x
jolokia / jolokia 1.0.0 1.0.0.x
jolokia / jolokia 1.1.2 1.1.2.x
jolokia / jolokia 1.1.4 1.1.4.x
jolokia / jolokia 1.0.2 1.0.2.x
jolokia / jolokia 1.0.4 1.0.4.x
jolokia / jolokia 1.1.1 1.1.1.x
jolokia / jolokia 1.0.6 1.0.6.x
jolokia / jolokia 1.0.5 1.0.5.x
jolokia / jolokia 1.0.3 1.0.3.x
org.jolokia / jolokia-core - 1.2.1