Description
Cross-site request forgery (CSRF) vulnerability in Lotus Mashups in IBM Mashup Center 3.0.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.
References
- IT12268 vendor-advisory
- 78455 vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg21970299