com.a9ski.brooklyn:apache-brooklyn-ldap-provider (1.0.0), eu.seaclouds-project:seaclouds-qa (1.0.0) +19 more potentially affected by CVE-2016-8737 via org.apache.brooklyn:brooklyn-rest-resources (0.9.0)

org.apache.brooklyn:brooklyn-rest-resources MAVEN version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.brooklyn:brooklyn-rest-resources and may be impacted: - com.a9ski.brooklyn:apache-brooklyn-ldap-provider 1.0.0 -...

io.brooklyn.clocker:brooklyn-clocker-dist (>=1.1.0, <=1.1.1), io.brooklyn.clocker:brooklyn-clocker-jsgui (>=1.1.0, <=1.1.1) +1 more potentially affected by CVE-2016-8737 via org.apache.brooklyn:brooklyn-jsgui (>=0.7.0-incubating, <=0.9.0)

org.apache.brooklyn:brooklyn-jsgui MAVEN version =0.7.0-incubating, =1.1.0, =1.1.0, =0.7.0-incubating, =0.9.0 Source cves: CVE-2016-8737 Source advisory: OSV:GHSA-G2HF-G7FH-VG92...

io.brooklyn.clocker:brooklyn-clocker-dist (>=1.1.0, <=1.1.1), io.brooklyn.clocker:brooklyn-clocker-jsgui (>=1.1.0, <=1.1.1) +1 more potentially affected by CVE-2016-8737 via org.apache.brooklyn:brooklyn-jsgui (>=0.7.0-incubating, <=0.9.0)

org.apache.brooklyn:brooklyn-jsgui MAVEN version =0.7.0-incubating, =1.1.0, =1.1.0, =0.7.0-incubating, =0.9.0 Source cves: CVE-2016-8737 Source advisory: SNYK:JAVA-ORGAPACHEBROOKLYN-9962104...

com.a9ski.brooklyn:apache-brooklyn-ldap-provider (1.0.0), eu.seaclouds-project:seaclouds-qa (1.0.0) +19 more potentially affected by CVE-2016-8737 via org.apache.brooklyn:brooklyn-rest-resources (0.9.0)

org.apache.brooklyn:brooklyn-rest-resources MAVEN version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.brooklyn:brooklyn-rest-resources and may be impacted: - com.a9ski.brooklyn:apache-brooklyn-ldap-provider 1.0.0 -...

CVE-2016-8737

In Apache Brooklyn, before version 0.10.0, the REST server is vulnerable to CSRF, allowing a malicious site to cause the user’s Brooklyn server to execute attacker commands via a forged request. A PoC exists per the CVE description. Several connected advisories document affected components and pr...

JVN#55489964: Multiple vulnerabilities in Apache Brooklyn

Apache Brooklyn is a framework for modeling, monitoring, and managing applications. Apache Brooklyn contains the following vulnerabilities. It is known that proof-of-concept code to exploit these vulnerabilties exist. Cross-site Scripting Vulnerabilities CWE-79 - CVE-2017-3165 Version| Vector|...