CVE-2019-9827: hawtio: server side request forgery via initial /proxy/ substring of a URI

Severity: Critical

CVSS Score: 9.8

Hawt Hawtio through 2.5.0 is vulnerable to SSRF, allowing a remote attacker to trigger an HTTP request from an affected server to an arbitrary host via the initial /proxy/ substring of a URI.