Description

Hawt Hawtio through 2.5.0 is vulnerable to SSRF, allowing a remote attacker to trigger an HTTP request from an affected server to an arbitrary host via the initial /proxy/ substring of a URI.

Remediation

References

https://www.ciphertechs.com/hawtio-advisory/

Related Vulnerabilities

CVE-2021-38296 Vulnerability in maven package org.apache.spark:spark-core

CVE-2021-28163 Vulnerability in maven package org.eclipse.jetty:jetty-deploy

CVE-2020-8570 Vulnerability in maven package io.kubernetes:client-java

CVE-2017-16146 Vulnerability in npm package mockserve

CVE-2023-27562 Vulnerability in npm package n8n

Severity

Critical

Classification

CWE-918 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Third Party Advisory