Brooklyn (Apache) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 13 known versions, newest CVE from 2017-09-13. Vendor: Apache.

CVEs of Brooklyn

• CVE-2017-3165 - CVSS 5.4 (medium), 2017-09-13: In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site scripting where one authenticated user can cause scripts to run in the browser…
• CVE-2016-8744 - CVSS 8.8 (high), 2017-09-13: Apache Brooklyn uses the SnakeYAML library for parsing YAML inputs. SnakeYAML allows the use of YAML tags to indicate that SnakeYAML should unmarshal data to…
• CVE-2016-8737 - CVSS 8.8 (high), 2017-09-13: In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site request forgery (CSRF), which could permit a malicious web site to produce a…