Hawt Hawtio 1.5.3

CPE Details

Hawt Hawtio 1.5.3
hawt
hawtio
1.5.3
2018-06-12
12h43 +00:00
2018-06-12
12h43 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:hawt:hawtio:1.5.3:*:*:*:*:*:*:*

Informations

Vendor

hawt

Product

hawtio

Version

1.5.3

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2019-9827 2019-07-03 18h13 +00:00 Hawt Hawtio through 2.5.0 is vulnerable to SSRF, allowing a remote attacker to trigger an HTTP request from an affected server to an arbitrary host via the initial /proxy/ substring of a URI.
9.8
Critique
CVE-2017-7556 2017-08-17 19h00 +00:00 Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script which can be submitted to hawtio server on behalf of the user.
8.8
Haute