Description
Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart name or (2) chart tool tip text; or the (3) href, (4) shape, or (5) coords attribute of a chart area.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | libjfreechart-java | 1.0.9-1 | — |
| Debian 13 | libjfreechart-java | 1.0.9-1 | — |
| Debian 12 | libjfreechart-java | 1.0.9-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Application Stack 1 | concurrent | 1.3.4-7jpp.ep1.6.el4 | RHSA-2008:0158 |
| Red Hat Rhel Application Stack 1 | glassfish-jaf | 1.1.0-0jpp.ep1.10.el4 | RHSA-2008:0158 |
| Red Hat Rhel Application Stack 1 | glassfish-javamail | 1.4.0-0jpp.ep1.8 | RHSA-2008:0158 |
| Red Hat Rhel Application Stack 1 | glassfish-jsf | 1.2_04-1.p02.0jpp.ep1.18 | RHSA-2008:0158 |
| Red Hat Rhel Application Stack 1 | glassfish-jstl | 1.2.0-0jpp.ep1.2 | RHSA-2008:0158 |
| Red Hat Rhel Application Stack 1 | hibernate3 +1 | 1:3.2.4-1.SP1_CP02.0jpp.ep1.1.el4 | RHSA-2008:0158 |
| Red Hat Rhel Application Stack 1 | hibernate3-annotations +1 | 3.2.1-1.patch02.1jpp.ep1.2.el4 | RHSA-2008:0158 |
| Red Hat Rhel Application Stack 1 | hibernate3-entitymanager +1 | 3.2.1-1jpp.ep1.6.el4 | RHSA-2008:0158 |
| Red Hat Rhel Application Stack 1 | hsqldb | 1:1.8.0.8-2.patch01.1jpp.ep1.1 | RHSA-2008:0158 |
| Red Hat Rhel Application Stack 1 | jacorb | 2.3.0-1jpp.ep1.4 | RHSA-2008:0158 |
| Red Hat Rhel Application Stack 1 | jboss-aop | 1.5.5-1.CP01.0jpp.ep1.1.el4 | RHSA-2008:0158 |
| Red Hat Rhel Application Stack 1 | jboss-cache | 1.4.1-4.SP8_CP01.1jpp.ep1.1.el4 | RHSA-2008:0158 |
| Red Hat Rhel Application Stack 1 | jboss-common | 1.2.1-0jpp.ep1.2 | RHSA-2008:0158 |
| Red Hat Rhel Application Stack 1 | jboss-remoting | 2.2.2-3.SP4.0jpp.ep1.1 | RHSA-2008:0158 |
| Red Hat Rhel Application Stack 1 | jboss-seam +1 | 1.2.1-1.ep1.3.el4 | RHSA-2008:0158 |
| Red Hat Rhel Application Stack 1 | jbossas | 4.2.0-3.GA_CP02.ep1.3.el4 | RHSA-2008:0158 |
| Red Hat Rhel Application Stack 1 | jbossweb | 2.0.0-3.CP05.0jpp.ep1.1 | RHSA-2008:0158 |
| Red Hat Rhel Application Stack 1 | jbossws-wsconsume-impl | 2.0.0-0jpp.ep1.3 | RHSA-2008:0158 |
| Red Hat Rhel Application Stack 1 | jbossxb | 1.0.0-2.SP1.0jpp.ep1.2.el4 | RHSA-2008:0158 |
| Red Hat Rhel Application Stack 1 | jcommon | 1.0.12-1jpp.ep1.2.el4 | RHSA-2008:0158 |
| Red Hat Rhel Application Stack 1 | jfreechart | 1.0.9-1jpp.ep1.2.el4 | RHSA-2008:0158 |
| Red Hat Rhel Application Stack 1 | jgroups | 1:2.4.1-1.SP4.0jpp.ep1.2 | RHSA-2008:0158 |
| Red Hat Rhel Application Stack 1 | rh-eap-docs +1 | 4.2.0-3.GA_CP02.ep1.1.el4 | RHSA-2008:0158 |
| Red Hat Rhel Application Stack 1 | wsdl4j | 1.6.2-1jpp.ep1.8 | RHSA-2008:0158 |
| Red Hat Network Satellite 5 | jabberd | 2.0s10-3.38.rhn | RHSA-2008:0261 |
| Red Hat Network Satellite 5 | java-1.4.2-ibm +1 | 1.4.2.10-1jpp.2.el4 | RHSA-2008:0261 |
| Red Hat Network Satellite 5 | jfreechart | 0.9.20-3.rhn | RHSA-2008:0630, RHSA-2008:0261 |
| Red Hat Network Satellite 5 | mod_perl | 2.0.2-12.el4 | RHSA-2008:0630 |
| Red Hat Network Satellite 5 | openmotif21 | 2.1.30-11.RHEL4.6 | RHSA-2008:0261 |
| Red Hat Network Satellite 5 | perl-Crypt-CBC | 2.24-1.el4 | RHSA-2008:0630, RHSA-2008:0261 |
| Red Hat Network Satellite 5 | rhn-apache | 1.3.27-36.rhn.rhel4 | RHSA-2008:0261 |
| Red Hat Network Satellite 5 | rhn-html | 5.1.1-7 | RHSA-2008:0630 |
| Red Hat Network Satellite 5 | rhn-modjk-ap13 | 1.2.23-2rhn.rhel4 | RHSA-2008:0261 |
| Red Hat Network Satellite 5 | rhn-modperl | 1.29-16.rhel4 | RHSA-2008:0261 |
| Red Hat Network Satellite 5 | rhn-modssl | 2.8.12-8.rhn.10.rhel4 | RHSA-2008:0261 |
| Red Hat Network Satellite 5 | tomcat5 | 5.0.30-0jpp_10rh | RHSA-2008:0630, RHSA-2008:0261 |
| Red Hat Network Satellite 4 | jabberd | 2.0s10-3.37.rhn | RHSA-2008:0524 |
| Red Hat Network Satellite 4 | java-1.4.2-ibm +1 | 1.4.2.10-1jpp.2.el3 | RHSA-2008:0524 |
| Red Hat Network Satellite 4 | jfreechart | 0.9.20-3.rhn | RHSA-2008:0524 |
| Red Hat Network Satellite 4 | openmotif21 | 2.1.30-9.RHEL3.8 | RHSA-2008:0524 |
| Red Hat Network Satellite 4 | perl-Crypt-CBC | 2.24-1.el3 | RHSA-2008:0524 |
| Red Hat Network Satellite 4 | rhn-apache | 1.3.27-36.rhn.rhel3 | RHSA-2008:0524 |
| Red Hat Network Satellite 4 | rhn-modjk-ap13 | 1.2.23-2rhn.rhel3 | RHSA-2008:0524 |
| Red Hat Network Satellite 4 | rhn-modperl | 1.29-16.rhel3 | RHSA-2008:0524 |
| Red Hat Network Satellite 4 | rhn-modssl | 2.8.12-8.rhn.10.rhel3 | RHSA-2008:0524 |
| Red Hat Network Satellite 4 | tomcat5 | 5.0.30-0jpp_10rh | RHSA-2008:0524 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat JBoss EAP 4 | glassfish-javamail | 1.4.0-0jpp.ep1.8 | RHSA-2008:0151 |
| Red Hat JBoss EAP 4 | hibernate3 +1 | 3.2.4-1.SP1_CP02.0jpp.ep1.1.el5.1 | RHSA-2008:0213, RHSA-2008:0151 |
| Red Hat JBoss EAP 4 | hibernate3-annotations +1 | 3.2.1-1.patch02.1jpp.ep1.2.el4 | RHSA-2008:0213, RHSA-2008:0151 |
| Red Hat JBoss EAP 4 | hibernate3-entitymanager +1 | 3.2.1-1jpp.ep1.6.el4 | RHSA-2008:0151 |
| Red Hat JBoss EAP 4 | hsqldb | 1:1.8.0.8-2.patch01.1jpp.ep1.1 | RHSA-2008:0151 |
| Red Hat JBoss EAP 4 | jacorb +3 | 2.3.0-1jpp.ep1.4 | RHSA-2008:0213, RHSA-2008:0151 |
| Red Hat JBoss EAP 4 | jboss-aop | 1.5.5-1.CP01.0jpp.ep1.1.el4 | RHSA-2008:0213, RHSA-2008:0151 |
| Red Hat JBoss EAP 4 | jboss-cache | 1.4.1-4.SP8_CP01.1jpp.ep1.1.el4 | RHSA-2008:0213, RHSA-2008:0151 |
| Red Hat JBoss EAP 4 | jboss-remoting | 2.2.2-3.SP4.0jpp.ep1.1 | RHSA-2008:0213, RHSA-2008:0151 |
| Red Hat JBoss EAP 4 | jboss-seam +1 | 1.2.1-1.ep1.3.el4 | RHSA-2008:0213, RHSA-2008:0151 |
| Red Hat JBoss EAP 4 | jbossas | 4.2.0-3.GA_CP02.ep1.3.el4 | RHSA-2008:0213, RHSA-2008:0151 |
| Red Hat JBoss EAP 4 | jbossweb | 2.0.0-3.CP05.0jpp.ep1.1 | RHSA-2008:0213, RHSA-2008:0151 |
| Red Hat JBoss EAP 4 | jbossws-jboss42 | 1.2.1-0jpp.ep1.2.el4 | RHSA-2008:0151 |
| Red Hat JBoss EAP 4 | jcommon | 1.0.12-1jpp.ep1.2.el4 | RHSA-2008:0213, RHSA-2008:0151 |
| Red Hat JBoss EAP 4 | jfreechart | 1.0.9-1jpp.ep1.2.el4 | RHSA-2008:0213, RHSA-2008:0151 |
| Red Hat JBoss EAP 4 | jgroups | 1:2.4.1-1.SP4.0jpp.ep1.2 | RHSA-2008:0151 |
| Red Hat JBoss EAP 4 | rh-eap-docs +1 | 4.2.0-3.GA_CP02.ep1.1.el4 | RHSA-2008:0213, RHSA-2008:0151 |
Advisories 6
- RHSA-2008:0524 Red Hat Security Advisory: Red Hat Network Satellite Server security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0261 Red Hat Security Advisory: Red Hat Network Satellite Server security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2008:0158 Red Hat Security Advisory: JBoss Enterprise Application Platform security update Red Hat Security Advisories (RHSA) · Jan 14, 2026
- RHSA-2008:0213 Red Hat Security Advisory: JBoss Enterprise Application Platform 4.2.0CP02 security update Red Hat Security Advisories (RHSA) · Jan 14, 2026
- RHSA-2008:0151 Red Hat Security Advisory: JBoss Enterprise Application Platform 4.2.0CP02 security update Red Hat Security Advisories (RHSA) · Jan 14, 2026
- RHSA-2008:0630 Red Hat Security Advisory: Red Hat Network Satellite Server security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- RHSA-2008:0630 vendor-advisory
- RHSA-2008:0213 vendor-advisory
- http://www.rapid7.com/advisories/R7-0031.jsp
- 31493 third-party-advisory
- 27959 third-party-advisory
- RHSA-2008:0151 vendor-advisory
- http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/branches/jfreechart-1.0.8-security/NEWS?r1=679&r2=680
- http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/trunk/source/org/jfree/chart/entity/ChartEntity.java?r1=662&r2=661&pathrev=662
- 26752 vdb-entry
- 20071206 R7-0031: JFreeChart Image Map Cross-Site Scripting Vulnerabilities mailing-list
- http://jfreechart.svn.sourceforge.net/viewvc/jfreechart/trunk/source/org/jfree/chart/imagemap/ImageMapUtilities.java?r1=662&r2=661&pathrev=662
- 41843 vdb-entry
- 41844 vdb-entry
- 3430 third-party-advisory
- 41845 vdb-entry
- RHSA-2008:0158 vendor-advisory
- RHSA-2008:0261 vendor-advisory
- jfreechart-imagemap-xss(38922) vdb-entry