QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2017-7556

Back to search

CVE-2017-7556

Published: Aug 17, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script which can be submitted to hawtio server on behalf of the user.

VendorProductVersions

Red Hat, Inc.

hawtio

affected
up to and including 1.5.3

Weaknesses (CWE)

CWE-352

References

100411
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now