Description

A flaw was found in Jolokia versions from 1.2 to before 1.6.1. Affected versions are vulnerable to a system-wide CSRF. This holds true for properly configured instances with strict checking for origin and referrer headers. This could result in a Remote Code Execution attack.

Remediation

References

CVE-2018-10899

Related Vulnerabilities

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4940)

MySQL CVE-2021-2481 Vulnerability (CVE-2021-2481)

Envoy Proxy NULL Pointer Dereference Vulnerability (CVE-2021-43824)

MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8774)

TYPO3 Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2017-14251)

Severity

High

Classification

CVE-2018-10899 CWE-352 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities