CVE-2015-0970

Cross-site request forgery CSRF vulnerability in SearchBlox before 8.2 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-0970

Cross-site request forgery CSRF vulnerability in SearchBlox before 8.2 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-0970

SearchBlox (enterprise search on Lucene) is affected by a CSRF vulnerability (CVE-2015-0970) in versions before 8.2. A remote attacker can hijack the authentication of an arbitrary user by inducing an authenticated user to trigger a malicious request. The issue is confirmed across multiple source...