Cross-site Request Forgery (CSRF)

Overview org.apache.jspwiki:jspwiki-main is a main release jar for Apache JSPWiki engine. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF through the AJAXPreview.jsp preview handler in jspwiki-war/src/main/webapp/templates/default/AJAXPreview.jsp and its caller...