https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T15:09:32.595668+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-29223 cnvd-2017-29223 2026-10-21T15:09:32.598711+00:00 cnvd-2017-29223 https://cve.radiocsirt.org/vuln/euvd-2026-74813 EUVD-2026-74813 2026-10-21T15:09:32.598743+00:00 EUVD-2026-74813 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7556 fkie_cve-2017-7556 2026-10-21T15:09:32.598757+00:00

Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script which can be submitted to hawtio server on behalf of the user.

 https://cve.radiocsirt.org/vuln/ghsa-q4q2-fvwf-6ghv GHSA-q4q2-fvwf-6ghv — Cross-Site Request Forgery in hawtio 2026-10-21T15:09:32.598784+00:00

Affected: Maven: io.hawt:project

It was found that hawtio contains a CSRF flaw that allows unrelated websites to perform actions as the authenticated user. Attackers could use this vulnerability to trick the user to visit his website that contains a malicious script which can be submitted to hawtio server on behalf of the user.

 https://cve.radiocsirt.org/vuln/gsd-2017-7556 gsd-2017-7556 2026-10-21T15:09:32.598807+00:00 gsd-2017-7556