Debian Security Advisory DSA 808-1 (tdiary)

The remote host is missing an update to tdiary announced via advisory DSA 808-1. The tdiary Development Team has discovered a Cross-Site Request Forgery CSRF vulnerability in tdiary, a new generation weblog that can be exploited by remote attackers to alter the users information. The old stable...