| Package | Affected versions | Patched versions |
|---|---|---|
| io.hawt:project | < 1.5.4 | 1.5.4 |
| hawtio | = 1.5.3 |
It was found that hawtio contains a CSRF flaw that allows unrelated websites to perform actions as the authenticated user. Attackers could use this vulnerability to trick the user to visit his website that contains a malicious script which can be submitted to hawtio server on behalf of the user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free