Cross-Site Request Forgery (CSRF)

Apache Archiva and redback-rest-services are vulnerable to cross-site request forgery CSRF attacks.The library does not protect against CSRF attacks at several REST endpoints. This allows a malicious user to send HTML responses that can perform arbitrary actions on the archiva services via a...