Description (CNA)
Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script which can be submitted to hawtio server on behalf of the user.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Red Hat, Inc. / hawtio | affected up to and including 1.5.3 |
CWE
CWE-352
References
ADP enrichment
No English description supplied.