CVE-2017-7556

High

Published: 17/08/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Hawtio versions up to and including 1.5.3 are vulnerable to a CSRF attack that allows remote attackers to trick the user into visiting their website containing a malicious script. This script can be submitted to the Hawtio server on behalf of the user.

Risk Assessment

A CSRF attack can lead to unauthorized access to user data and execution of unwanted actions on the Hawtio server, posing a serious security threat to the organization.

Recommendation

It is recommended to update Hawtio to the latest version to mitigate this vulnerability and implement additional protections against CSRF attacks.

Other vulnerabilities in Hawtio

CVE-2023-33544Medium
Hawtio version 2.17.2 is vulnerable to Path Traversal. It is possible to input malicious zip files, which can result in high-risk files being stored in any location, even leading to file overwrite.

Original NVD description (English source)

Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script which can be submitted to hawtio server on behalf of the user.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS