CVE-2017-7556 - AskarLabs CVE Database

CVE-2017-7556

Vendor Red Hat, Inc.

Product hawtio

Weakness CWE-352 · CSRF

Published August 17, 2017

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script which can be submitted to hawtio server on behalf of the user.

Key dates

02Disclosure timeline

August 17, 2017 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-7556 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/352.html

Related vulnerabilities

04Related CVE

CVE-2018-25170 DoceboLMS 1.2 SQL Injection via lesson.php CVE-2024-32537 WordPress Flash Video Player plugin <= 5.0.4 - CSRF to XSS vulnerability CVE-2020-7534 CVE-2023-22709 WordPress SRS Simple Hits Counter Plugin <= 1.1.0 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2021-41295 ECOA BAS controller - Cross-Site Request Forgery (CSRF)