Cross-Site Request Forgery (CSRF)

clockworkweb is vulnerable to Cross-Site Request Forgery CSRF. The vulnerability exists in the protectfromforgery function in homecontroller.rb, which allows an attacker to manipulate the actions of authenticated users by tricking them into clicking on a malicious link or visiting a malicious...