Unscored CVE-2012-2380 EUVD-2012-2368GHSA-gm66-g5rh-xr6p

Multiple cross-site request forgery (CSRF) vulnerabilities in the admin/editor console in Apache Roller before 5.0.1 allow remote attackers…

Published Jun 26, 2012 · Updated Sep 16, 2024 · Assigned by redhat

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the admin/editor console in Apache Roller before 5.0.1 allow remote attackers to hijack the authentication of admins or editors by leveraging the HTTP POST functionality.

References

20120624 CVE-2012-2380: Apache Roller Cross-Site-Resource-Forgery (XSRF) vulnerability mailing-list