Description
Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script which can be submitted to hawtio server on behalf of the user.
Remediation
References
http://www.securityfocus.com/bid/100411
https://bugzilla.redhat.com/show_bug.cgi?id=1480060
Related Vulnerabilities
CVE-2010-2076 Vulnerability in maven package org.apache.cxf:cxf-bundle-jaxrs
CVE-2020-2224 Vulnerability in maven package org.jenkins-ci.plugins:matrix-project
CVE-2020-2222 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2018-9159 Vulnerability in maven package com.sparkjava:spark-core
CVE-2019-11343 Vulnerability in maven package org.torpedoquery:org.torpedoquery