Apache Brooklyn
3 CVEs affecting Apache Brooklyn. Latest disclosed: 2017-09-13. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-8744 | High | 8.8 | 2017-09-13 | Apache Brooklyn uses the SnakeYAML library for parsing YAML inputs. SnakeYAML allows the use of YAML tags to indicate that SnakeYAML should unmarshal data to a… |
CVE-2016-8737 | High | 8.8 | 2017-09-13 | In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site request forgery (CSRF), which could permit a malicious web site to produce a link… |
CVE-2017-3165 | Medium | 5.4 | 2017-09-13 | In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site scripting where one authenticated user can cause scripts to run in the browser of… |