CVE-2013-4378 PoC — JavaMelody ‘X-Forwarded-For’ Header 跨站脚本漏洞

Source

https://github.com/theratpack/grails-javamelody-sample-app

Associated Vulnerability

Title:JavaMelody ‘X-Forwarded-For’ Header 跨站脚本漏洞 (CVE-2013-4378)
Description:Cross-site scripting (XSS) vulnerability in HtmlSessionInformationsReport.java in JavaMelody 1.46 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted X-Forwarded-For header.

Description

 Grails sample application using the Javamelody 1.44 plugin to illustrate the CVE-2013-4378 vulnerability.

Readme


Grails Javamelody Sample App
============================

Grails sample application using the <a href="http://grails.org/plugin/grails-melody">Javamelody 
plugin</a> (version 1.44) to illustrate the <a href="http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4378">CVE-2013-4378 vulnerability</a>.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!