Description
Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script which can be submitted to hawtio server on behalf of the user.
Remediation
References
https://bugzilla.redhat.com/show_bug.cgi?id=1480060
http://www.securityfocus.com/bid/100411
Related Vulnerabilities
CVE-2020-9483 Vulnerability in maven package org.apache.skywalking:server-storage-plugin
CVE-2022-25645 Vulnerability in maven package org.webjars.npm:dset
CVE-2020-2210 Vulnerability in maven package org.jenkins-ci.plugins:stashbranchparameter
CVE-2023-25805 Vulnerability in npm package versionn
CVE-2020-26870 Vulnerability in maven package org.webjars.bower:dompurify