CVE-2014-8900

Cross-site request forgery CSRF vulnerability in IBM UrbanCode Release 6.0.1.6 and earlier, 6.1.0.7 and earlier, and 6.1.1.1 and earlier...

CVE-2014-8900

IBM UrbanCode Release is vulnerable to cross-site request forgery (CSRF) due to improper validation of user-supplied input. A remote attacker could entice an authenticated user to visit a malicious site to send crafted requests, potentially enabling cross-site scripting, web cache poisoning, and ...