CVE-2010-5087

SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 allows remote attackers to bypass the cross-site request forgery CSRF protection mechanism and hijack the authentication of administrators via vectors related to "form action requests" using a controller...

CVE-2010-5087

CVE-2010-5087 affects SilverStripe 2.3.x prior to 2.3.10 and 2.4.x prior to 2.4.4. The issue allows remote attackers to bypass CSRF protection and hijack administrator sessions via vectors related to form action requests handled by a controller. Impact is authenticated session hijacking through C...