CVE-2009-1434

Cross-site request forgery CSRF vulnerability in Foswiki before 1.0.5 allows remote attackers to hijack the authentication of arbitrary users for requests that modify pages, change permissions, or change group memberships, as demonstrated by a URL for a 1 save or 2 view script in the SRC attribut...

CVE-2009-1434

Foswiki CSRF (CVE-2009-1434): Affected: Foswiki 1.0.x prior to 1.0.5. Vulnerable vector involves CSRF via URLs in IMG SRC attributes that trigger save/view scripts, enabling an attacker to hijack user sessions to modify pages, change permissions, or alter group memberships. Root cause: insufficie...

CVE-2009-1434: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Foswiki before 1.0.5 allows remote attackers to hijack the authentication of arbitrary users for requests that modify pages, change permissions, or change group memberships, as demonstrated by a URL for a 1 save or 2 view script in the SRC attribut...