CVE-2016-8737

State: Published
Severity: Not scored
Published: Sep 13, 2017
Updated: Sep 17, 2024
Reserved: Oct 18, 2016

Description

In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site request forgery (CSRF), which could permit a malicious web site to produce a link which, if clicked whilst a user is logged in to Brooklyn, would cause the server to execute the attacker's commands as the user. There is known to be a proof-of-concept exploit using this vulnerability.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Apache BrooklynApache Software Foundation	0.9.0 and all prior versionsAffected

References

https://brooklyn.apache.org/community/security/CVE-2016-8737.html
96228vdb-entry
[dev] 20170210 [SECURITY] CVE-2016-8737: Cross-site request forgery vulnerability in Apache Brooklynmailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.