CVE-2007-6306: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart name or (2) chart tool tip text; or the (3) href, (4) shape, or (5) coords attribute of a chart area.
Affected Software
Remediation
Event History
Frequently Asked Questions
Which deployments are realistically exposed?
Applications that generate and serve JFreeChart image maps are exposed when attacker-controlled values can reach the chart name, tooltip text, or a chart area's href, shape, or coords attributes. The issue is remotely exploitable and does not require authentication.
What attacker-controlled input is required?
An attacker needs a way to influence data used in the generated image map, specifically one of the affected name, tooltip, href, shape, or coords fields. Successful exploitation allows injection of web script or HTML into the resulting page.
What can be done if patching is not immediately possible?
Apply the available patch. If patching cannot be completed immediately, prevent untrusted input from being used in image-map chart names, tooltips, and chart-area attributes, or avoid serving affected image maps in web pages.