CVE-2014-0168
Cross-Site Request Forgery in Jolokia
Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.
Exploit likelihood
What each source reports
NVD Score used
Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.
- Record
CVE-2014-0168- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-352
- Updated
- 2026-11-02
CVE List No score
Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.
- Record
CVE-2014-0168- Updated
- 2026-11-02
EUVDEUVD-2022-3797 No score
Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.
- Record
EUVD-2022-3797- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fjhw-8222-g2hg No score
Cross-Site Request Forgery in Jolokia
Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.
- Record
GHSA-fjhw-8222-g2hg- Weakness
- CWE-352
- Updated
- 2026-11-02
OSVGHSA-fjhw-8222-g2hg No score
Cross-Site Request Forgery in Jolokia
Cross-site request forgery (CSRF) vulnerability in Jolokia before 1.2.1 allows remote attackers to hijack the authentication of users for requests that execute MBeans methods via a crafted web page.
- Record
GHSA-fjhw-8222-g2hg- Weakness
- CWE-352
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.jolokia:jolokia-coreMaven |
before 1.2.1 | 1.2.1 |
org.jolokia:jolokia-coreMaven |
before 1.2.1, plus listed versions 1.0.01.0.11.0.21.0.31.0.4 Show 9 moreShow less1.0.51.0.61.1.01.1.11.1.21.1.31.1.41.1.51.2.0 |
1.2.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-0168 is a medium vulnerability (CVSS 6.8) in Jolokia, published October 6, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.74%, the 54th percentile. Fixed in org.jolokia:jolokia-core 1.2.1.