Description
Cross-site request forgery (CSRF) vulnerability in OpenCA PKI 0.9.2.5, and possibly earlier versions, allows remote attackers to perform unauthorized actions as authorized users via a link or IMG tag to RAServer.
References
- 20080213 OpenCA XSRF (CVE-2008-0556) mailing-list
- https://www.cynops.de/advisories/CVE-2008-0556.txt
- openca-certificate-csrf(40476) vdb-entry
- ADV-2008-0588 vdb-entry
- 28951 third-party-advisory
- 1019426 vdb-entry
- VU#264385 third-party-advisory