Not rated
CVE-2016-8737 In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site request forgery (CSRF), which could permit…
Description
In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site request forgery (CSRF), which could permit a malicious web site to produce a link which, if clicked whilst a user is logged in to Brooklyn, would cause the server to execute the attacker's commands as the user. There is known to be a proof-of-concept exploit using this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Brooklyn | Versions not published |
References
- brooklyn.apache.org brooklyn.apache.org
- 96228 www.securityfocus.com
- [dev] 20170210 [SECURITY] CVE-2016-8737: Cross-site request forgery vulnerability in Apache Brooklyn lists.apache.org
Timeline
- Published
- Last modified