PT-2018-10646

Name of the Vulnerable Software and Affected Versions SearchBlox version 8.6.6 Description The issue concerns a CSRF token bypass in the servlet/UserServlet endpoint. This allows for potential exploitation via the u name, u passwd1, u passwd2, role, and X-XSRF-TOKEN POST parameters. Recommendatio...

CVE-2018-11538: Cross-Site Request Forgery (CSRF)

servlet/UserServlet in SearchBlox 8.6.6 has CSRF via the uname, upasswd1, upasswd2, role, and X-XSRF-TOKEN POST parameters because of CSRF Token Bypass...