Cross site request forgery (csrf)

An issue was discovered in the webmail component in Zimbra Collaboration Suite ZCS 8.8.15 and 9.0. When using preauth, CSRF tokens are not checked on some POST endpoints. Thus, when an authenticated user views an attacker-controlled page, a request will be sent to the application that appears to ...

Zimbra Collaboration Suite 跨站请求伪造漏洞

Zimbra Collaboration Suite ZCS is an open source collaboration suite from Synacor, USA. The product includes WebMail, Calendar, Address Book and more. A cross-site request forgery vulnerability exists in Zimbra Collaboration Suite ZCS version 8.8.15, 9.0, which stems from a cross-site request...

CVE-2019-13183

Flarum before 0.1.0-beta.9 allows CSRF against all POST endpoints, as demonstrated by changing admin settings...

CVE-2019-13183

Flarum before 0.1.0-beta.9 allows CSRF against all POST endpoints, as demonstrated by changing admin settings...

CVE-2019-13183

CVE-2019-13183 : Flarum before 0.1.0-beta.9 is vulnerable to cross-site request forgery (CSRF) on all POST endpoints, demonstrated by changing admin settings. The issue affects Flarum open-source forum software prior to the 0.1.0-beta.9 release; no explicit root-cause details beyond CSRF exposure...