CVE-2015-2912

CVE-2015-2912 affects OrientDB Studio (Community Edition) via its JSONP endpoint. The vulnerability allows CSRF by not properly restricting JSONP callback values, enabling an unauthenticated or remote attacker to perform actions and potentially access sensitive data. Affected versions are OrientD...