admin/dev/shortcuts.jsp lacks an XSRF token to alter installed/.configured shortcuts

2012-04-19T04:19:16
ID ATLASSIAN:CONFSERVER-25269
Type atlassian
Reporter dblack
Modified 2017-02-17T05:23:55

Description

admin/dev/shortcuts.jsp does not require a csrf token to alter installed/.configured shortcuts.