Skip to content

CVE-2014-0168 Cross-Site Request Forgery in Jolokia

MediumCVSS 6.8 EPSS 0.74%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.

Affected products

ProductAffected versionsFixed in
org.jolokia/jolokia-core(Maven) < 1.2.1 1.2.1
org.jolokia/jolokia-core(Maven) = 1.0.0 No fix listed
org.jolokia/jolokia-core(Maven) = 1.0.1 No fix listed
org.jolokia/jolokia-core(Maven) = 1.0.2 No fix listed
org.jolokia/jolokia-core(Maven) = 1.0.3 No fix listed
org.jolokia/jolokia-core(Maven) = 1.0.4 No fix listed
org.jolokia/jolokia-core(Maven) = 1.0.5 No fix listed
org.jolokia/jolokia-core(Maven) = 1.0.6 No fix listed
org.jolokia/jolokia-core(Maven) = 1.1.0 No fix listed
org.jolokia/jolokia-core(Maven) = 1.1.1 No fix listed
org.jolokia/jolokia-core(Maven) = 1.1.2 No fix listed
org.jolokia/jolokia-core(Maven) = 1.1.3 No fix listed
org.jolokia/jolokia-core(Maven) = 1.1.4 No fix listed
org.jolokia/jolokia-core(Maven) = 1.1.5 No fix listed
org.jolokia/jolokia-core(Maven) = 1.2.0 No fix listed
jolokia <= 1.2.0 No fix listed
jolokia = 1.0.0 No fix listed
jolokia = 1.0.1 No fix listed
jolokia = 1.0.2 No fix listed
jolokia = 1.0.3 No fix listed
jolokia = 1.0.4 No fix listed
jolokia = 1.0.5 No fix listed
jolokia = 1.0.6 No fix listed
jolokia = 1.1.0 No fix listed
jolokia = 1.1.1 No fix listed
Show 4 more
ProductAffected versionsFixed in
jolokia = 1.1.2 No fix listed
jolokia = 1.1.3 No fix listed
jolokia = 1.1.4 No fix listed
jolokia = 1.1.5 No fix listed

References