{"id":"CVE-2014-0168","aliases":[],"url":"https://o3.security/vulnerability/CVE-2014-0168","summary":"Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.","details":"Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.","published":"2014-10-06T14:55:08.250","modified":"2026-06-17T00:02:25.727","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[],"fix":{"url":"https://github.com/rhuss/jolokia/commit/2d9b168cfbbf5a6d16fa6e8a5b34503e3dc42364","label":"rhuss/jolokia@2d9b168"},"references":[{"type":"ADVISORY","url":"http://rhn.redhat.com/errata/RHSA-2014-1351.html"},{"type":"EXPLOIT","url":"https://github.com/rhuss/jolokia/commit/2d9b168cfbbf5a6d16fa6e8a5b34503e3dc42364"},{"type":"ADVISORY","url":"http://rhn.redhat.com/errata/RHSA-2014-1351.html"},{"type":"EXPLOIT","url":"https://github.com/rhuss/jolokia/commit/2d9b168cfbbf5a6d16fa6e8a5b34503e3dc42364"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-06-17T00:02:25.727"}}