Medium severity6.1NVD Advisory· Published Jun 14, 2018· Updated Jun 17, 2026

CVE-2018-12432

Description

JavaMelody through 1.60.0 has XSS via the counter parameter in a clear_counter action to the /monitoring URI.

LLM-synthesized narrative grounded in this CVE's description and references.

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
net.bull.javamelody:javamelody-coreMaven	< 1.61.0	1.61.0

Javamelody Project/Javamelody
cpe:2.3:a:javamelody_project:javamelody:*:*:*:*:*:*:*:*
Range: <=1.60.0
ghsa-coords
pkg:maven/net.bull.javamelody/javamelody-core
Range: < 1.61.0

No linked articles in our index yet.