Description
Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script which can be submitted to hawtio server on behalf of the user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | hawtio | up to and including 1.5.3 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | io.hawt:project | < 1.5.4 | 1.5.4 | GHSA-q4q2-fvwf-6ghv |