Description
Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script which can be submitted to hawtio server on behalf of the user.
Remediation
References
http://www.securityfocus.com/bid/100411
https://bugzilla.redhat.com/show_bug.cgi?id=1480060
Related Vulnerabilities
CVE-2019-10460 Vulnerability in maven package org.jenkins-ci.plugins:bitbucket-oauth
CVE-2021-37695 Vulnerability in maven package org.webjars.bowergithub.ckeditor:ckeditor4
CVE-2022-35949 Vulnerability in npm package undici
CVE-2021-43307 Vulnerability in npm package semver-regex
CVE-2015-8857 Vulnerability in maven package org.webjars.npm:uglify-js