io.hawt:project@1.5.3 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the io.hawt:project package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Cross-site Request Forgery (CSRF)

io.hawt:project is an HTML5 web console with plugins for managing Java stuff.

Affected versions of this package are vulnerable to Cross-site Request Forgery (CSRF). An attacker could trick the user to visit his website containing a malicious script which can be submitted to hawtio server on behalf of the user.

How to fix Cross-site Request Forgery (CSRF)?

Upgrade io.hawt:project to version 1.5.4 or higher.

[1.5.0,1.5.4)