CVE-2017-7556CWE-352

Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a…

published August 17, 2017

CVSS
—
EPSS
1%
Percentile
51.7
In the wild
Unconfirmed
What it is

Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script which can be submitted to hawtio server on behalf of the user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00683 · 51.7th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2017-08-17T19:00Z
EPSS history
Timeline
  • 17 AUG 19:00Z
    Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a…
    cvelistv5