Apache / Brooklyn
3 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2017-3165 | In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site scripting where one authenticated user can cause scripts to run in the browser of… | MEDIUM | 5.4 | Sep 13, 2017 |
| CVE-2016-8744 | Apache Brooklyn uses the SnakeYAML library for parsing YAML inputs. SnakeYAML allows the use of YAML tags to indicate that SnakeYAML should unmarshal data to a… | HIGH | 8.8 | Sep 13, 2017 |
| CVE-2016-8737 | In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site request forgery (CSRF), which could permit a malicious web site to produce a link… | HIGH | 8.8 | Sep 13, 2017 |
Showing 1 to 3 of 3 CVEs