CVE-2017-7556 Cross-Site Request Forgery in hawtio
HighCVSS 8.8
EPSS 0.68%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script which can be submitted to hawtio server on behalf of the user.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| io.hawt/project(Maven) | < 1.5.4 | 1.5.4 |
| io.hawt/project(Maven) | = 1.0 | No fix listed |
| io.hawt/project(Maven) | = 1.1 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M1 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M10 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M11 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M13 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M14 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M16 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M19 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M2 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M20 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M22 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M23 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M24 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M25 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M26 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M27 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M3 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M4 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M5 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M6 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M7 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M8 | No fix listed |
| io.hawt/project(Maven) | = 1.2-M9 | No fix listed |
Show 80 more
| Product | Affected versions | Fixed in |
|---|---|---|
| io.hawt/project(Maven) | = 1.2.0 | No fix listed |
| io.hawt/project(Maven) | = 1.2.1 | No fix listed |
| io.hawt/project(Maven) | = 1.2.2 | No fix listed |
| io.hawt/project(Maven) | = 1.2.3 | No fix listed |
| io.hawt/project(Maven) | = 1.3.0 | No fix listed |
| io.hawt/project(Maven) | = 1.3.1 | No fix listed |
| io.hawt/project(Maven) | = 1.4.0 | No fix listed |
| io.hawt/project(Maven) | = 1.4.1 | No fix listed |
| io.hawt/project(Maven) | = 1.4.10 | No fix listed |
| io.hawt/project(Maven) | = 1.4.11 | No fix listed |
| io.hawt/project(Maven) | = 1.4.12 | No fix listed |
| io.hawt/project(Maven) | = 1.4.14 | No fix listed |
| io.hawt/project(Maven) | = 1.4.15 | No fix listed |
| io.hawt/project(Maven) | = 1.4.16 | No fix listed |
| io.hawt/project(Maven) | = 1.4.17 | No fix listed |
| io.hawt/project(Maven) | = 1.4.18 | No fix listed |
| io.hawt/project(Maven) | = 1.4.19 | No fix listed |
| io.hawt/project(Maven) | = 1.4.2 | No fix listed |
| io.hawt/project(Maven) | = 1.4.20 | No fix listed |
| io.hawt/project(Maven) | = 1.4.21 | No fix listed |
| io.hawt/project(Maven) | = 1.4.22 | No fix listed |
| io.hawt/project(Maven) | = 1.4.23 | No fix listed |
| io.hawt/project(Maven) | = 1.4.24 | No fix listed |
| io.hawt/project(Maven) | = 1.4.25 | No fix listed |
| io.hawt/project(Maven) | = 1.4.26 | No fix listed |
| io.hawt/project(Maven) | = 1.4.27 | No fix listed |
| io.hawt/project(Maven) | = 1.4.28 | No fix listed |
| io.hawt/project(Maven) | = 1.4.29 | No fix listed |
| io.hawt/project(Maven) | = 1.4.30 | No fix listed |
| io.hawt/project(Maven) | = 1.4.31 | No fix listed |
| io.hawt/project(Maven) | = 1.4.32 | No fix listed |
| io.hawt/project(Maven) | = 1.4.33 | No fix listed |
| io.hawt/project(Maven) | = 1.4.34 | No fix listed |
| io.hawt/project(Maven) | = 1.4.35 | No fix listed |
| io.hawt/project(Maven) | = 1.4.36 | No fix listed |
| io.hawt/project(Maven) | = 1.4.37 | No fix listed |
| io.hawt/project(Maven) | = 1.4.38 | No fix listed |
| io.hawt/project(Maven) | = 1.4.39 | No fix listed |
| io.hawt/project(Maven) | = 1.4.4 | No fix listed |
| io.hawt/project(Maven) | = 1.4.40 | No fix listed |
| io.hawt/project(Maven) | = 1.4.41 | No fix listed |
| io.hawt/project(Maven) | = 1.4.42 | No fix listed |
| io.hawt/project(Maven) | = 1.4.43 | No fix listed |
| io.hawt/project(Maven) | = 1.4.44 | No fix listed |
| io.hawt/project(Maven) | = 1.4.45 | No fix listed |
| io.hawt/project(Maven) | = 1.4.46 | No fix listed |
| io.hawt/project(Maven) | = 1.4.47 | No fix listed |
| io.hawt/project(Maven) | = 1.4.48 | No fix listed |
| io.hawt/project(Maven) | = 1.4.49 | No fix listed |
| io.hawt/project(Maven) | = 1.4.5 | No fix listed |
| io.hawt/project(Maven) | = 1.4.50 | No fix listed |
| io.hawt/project(Maven) | = 1.4.51 | No fix listed |
| io.hawt/project(Maven) | = 1.4.52 | No fix listed |
| io.hawt/project(Maven) | = 1.4.53 | No fix listed |
| io.hawt/project(Maven) | = 1.4.54 | No fix listed |
| io.hawt/project(Maven) | = 1.4.55 | No fix listed |
| io.hawt/project(Maven) | = 1.4.56 | No fix listed |
| io.hawt/project(Maven) | = 1.4.57 | No fix listed |
| io.hawt/project(Maven) | = 1.4.58 | No fix listed |
| io.hawt/project(Maven) | = 1.4.59 | No fix listed |
| io.hawt/project(Maven) | = 1.4.6 | No fix listed |
| io.hawt/project(Maven) | = 1.4.60 | No fix listed |
| io.hawt/project(Maven) | = 1.4.61 | No fix listed |
| io.hawt/project(Maven) | = 1.4.62 | No fix listed |
| io.hawt/project(Maven) | = 1.4.63 | No fix listed |
| io.hawt/project(Maven) | = 1.4.64 | No fix listed |
| io.hawt/project(Maven) | = 1.4.65 | No fix listed |
| io.hawt/project(Maven) | = 1.4.66 | No fix listed |
| io.hawt/project(Maven) | = 1.4.67 | No fix listed |
| io.hawt/project(Maven) | = 1.4.68 | No fix listed |
| io.hawt/project(Maven) | = 1.4.7 | No fix listed |
| io.hawt/project(Maven) | = 1.4.8 | No fix listed |
| io.hawt/project(Maven) | = 1.4.9 | No fix listed |
| io.hawt/project(Maven) | = 1.5.0 | No fix listed |
| io.hawt/project(Maven) | = 1.5.1 | No fix listed |
| io.hawt/project(Maven) | = 1.5.2 | No fix listed |
| io.hawt/project(Maven) | = 1.5.3 | No fix listed |
| io.hawt/project(Maven) | = 1.5.X | No fix listed |
| hawtio | = 1.5.3 | No fix listed |
| redhat hawtio | = up to and including 1.5.3 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- github.com
- github.com product
- 100411 third-party-advisory vdb-entry