CVE-2016-8737

In Apache Brooklyn, before version 0.10.0, the REST server is vulnerable to CSRF, allowing a malicious site to cause the user’s Brooklyn server to execute attacker commands via a forged request. A PoC exists per the CVE description. Several connected advisories document affected components and pr...