Description
JavaMelody through 1.60.0 has XSS via the counter parameter in a clear_counter action to the /monitoring URI.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | net.bull.javamelody:javamelody-core | < 1.61.0 | 1.61.0 | GHSA-g66q-grxc-64j3 |