Cross-Site Request Forgery(CSRF)

Apache Fediz Spring Plugin is vulnerable to cross-site request forgery CSRF attacks. The attacks are possible because the application does not properly check the session state of a HTTP request, allowing a malicious user to take the roles of other end users...

Cross-site Request Forgery (CSRF)

Apache Fediz is vulnerable to cross-site request forgery CSRF attacks. The attack happens when a client starts the authentication process and does not complete it for example when the IdP is unavailable, leading to a security context set up using a malicious client's roles for the given enduser...