https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 23:37:45 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-184115 EUVD-2026-184115 https://cve.radiocsirt.org/vuln/euvd-2026-184115 https://cve.radiocsirt.org/vuln/fkie_cve-2016-8737 <p>In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site request forgery (CSRF), which could permit a malicious web site to produce a link which, if clicked whilst a user is logged in to Brooklyn, would cause the server to execute the attacker&#39;s commands as the user. There is known to be a proof-of-concept exploit using this vulnerability.</p> <p>In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site request forgery (CSRF), which could permit a malicious web site to produce a link which, if clicked whilst a user is logged in to Brooklyn, would cause the server to execute the attacker&#39;s commands as the user. There is known to be a proof-of-concept exploit using this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-8737 https://cve.radiocsirt.org/vuln/ghsa-g2hf-g7fh-vg92 <p><strong>Affected:</strong> Maven: org.apache.brooklyn:brooklyn-rest-resources, Maven: org.apache.brooklyn:brooklyn-jsgui</p> <p>In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site request forgery (CSRF), which could permit a malicious web site to produce a link which, if clicked whilst a user is logged in to Brooklyn, would cause the server to execute the attacker&#39;s commands as the user. There is known to be a proof-of-concept exploit using this vulnerability.</p> <p><strong>Affected:</strong> Maven: org.apache.brooklyn:brooklyn-rest-resources, Maven: org.apache.brooklyn:brooklyn-jsgui</p> <p>In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site request forgery (CSRF), which could permit a malicious web site to produce a link which, if clicked whilst a user is logged in to Brooklyn, would cause the server to execute the attacker&#39;s commands as the user. There is known to be a proof-of-concept exploit using this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-g2hf-g7fh-vg92 https://cve.radiocsirt.org/vuln/gsd-2016-8737 gsd-2016-8737 https://cve.radiocsirt.org/vuln/gsd-2016-8737 https://cve.radiocsirt.org/vuln/jvndb-2017-000025 <p>Apache Brooklyn is a framework for modeling, monitoring, and managing applications. Apache Brooklyn contains cross-site scripting vulnerabilities. It is known that proof-of-concept code to exploit these vulnerabilties exist. Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>Apache Brooklyn is a framework for modeling, monitoring, and managing applications. Apache Brooklyn contains cross-site scripting vulnerabilities. It is known that proof-of-concept code to exploit these vulnerabilties exist. Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2017-000025