Lucene search
+L

1 matches found

Atlassian
Atlassian
added 2012/04/19 1:22 a.m.21 views

admin/createMissingPersonalInfo.jsp lacks an XSRF token to trigger "build Personal Information objects"

admin/createMissingPersonalInfo.jsp doesn't require a csrf token to trigger "build Personal Information objects". When fixing this issue, please ensure that the JSP is converted to an action or deleted - we don't want to have to maintain our XSRF infrastructure in JSPs...

2.2AI score
SaveExploits0Affected Software1
Rows per page
Query Builder