Giorgio Fedon

The issue is related to insufficient access control in the JMX-Console web application. This allows remote attackers to send requests to the application's handler using a different method, potentially disclosing protected information.

The issue allows remote attackers to cause a denial of service, specifically memory consumption, when a long sequence of # (hash) characters is appended to a PDF URL. This is related to a cross-site scripting issue and can occur when the plugin is used with browsers such as Internet Explorer, Google Chrome, or Opera.