Product · Apache Software Foundation

Apache Brooklyn

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 8.8

CVE-2016-8737

Apache Brooklyn is vulnerable to cross-site request forgery (CSRF)

In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site request forgery (CSRF), which could permit a malicious web site to produce a link which, if clicked whilst a user is logged in to Brooklyn, would cause the server to execute the att…

Apache Software Foundation Apache Brooklyn org.apache.brooklyn:brooklyn-rest-resources org.apache.brooklyn:brooklyn-jsgui Maven

Sep 13, 2017
High 8.8

CVE-2016-8744

Deserialization of Untrusted Data in Apache Brooklyn

Apache Brooklyn uses the SnakeYAML library for parsing YAML inputs. SnakeYAML allows the use of YAML tags to indicate that SnakeYAML should unmarshal data to a Java type. In the default configuration in Brooklyn before 0.10.0, SnakeYAML will allow unmarshalli…

Apache Software Foundation Apache Brooklyn org.apache.brooklyn:brooklyn Maven

Sep 13, 2017