CVE-2016-20102Published
JavaMelody < 1.60.0 Reflected XSS via monitoring graph parameter
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2016-20102 · Microsoft / collected KEV context
cve-program · CVE-2016-20102
- https://github.com/javamelody/javamelody/pull/555
- https://github.com/javamelody/javamelody/commit/de7b648eebc3254fcb82fcda60de83a212271def
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/other/java-melody-xss.yaml
- https://www.vulncheck.com/advisories/javamelody-1.60.0-reflected-xss-via-monitoring-graph-parameter
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.