CVE-2017-7556: Cross-Site Request Forgery (CSRF)

August 17, 2017 (updated October 9, 2019)

hawtio is vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script which can be submitted to hawtio server on behalf of the user.

References

www.securityfocus.com/bid/100411
bugzilla.redhat.com/show_bug.cgi?id=1480060
nvd.nist.gov/vuln/detail/CVE-2017-7556

Code Behaviors & Features

Detect and mitigate CVE-2017-7556 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →