CVE-2016-8737

In Apache Brooklyn, before version 0.10.0, the REST server is vulnerable to CSRF, allowing a malicious site to cause the user’s Brooklyn server to execute attacker commands via a forged request. A PoC exists per the CVE description. Several connected advisories document affected components and pr...

JVN#55489964: Multiple vulnerabilities in Apache Brooklyn

Apache Brooklyn is a framework for modeling, monitoring, and managing applications. Apache Brooklyn contains the following vulnerabilities. It is known that proof-of-concept code to exploit these vulnerabilties exist. Cross-site Scripting Vulnerabilities CWE-79 - CVE-2017-3165 Version| Vector|...