Description
Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script which can be submitted to hawtio server on behalf of the user.
Remediation
References
http://www.securityfocus.com/bid/100411
https://bugzilla.redhat.com/show_bug.cgi?id=1480060
Related Vulnerabilities
CVE-2019-1353 Vulnerability in npm package nodegit
CVE-2022-23621 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore
CVE-2023-37944 Vulnerability in maven package org.datadog.jenkins.plugins:datadog
CVE-2021-26272 Vulnerability in npm package ckeditor4-dev
CVE-2021-32827 Vulnerability in maven package org.mock-server:mockserver-core