Description
Cross-site request forgery (CSRF) vulnerability in ACollab 1.2 allows remote attackers to hijack the authentication of arbitrary users for requests that add personal agenda items.
References
- acollab-unspecified-csrf(50835) vdb-entry
- 35173 third-party-advisory
- http://holisticinfosec.org/content/view/115/45/