medium6.8
CVE-2012-2380
Multiple cross-site request forgery (CSRF) vulnerabilities in the admin/editor console in Apache Roller before 5.0.1 allow remote attackers to hijack the authe…
Impact
Multiple cross-site request forgery (CSRF) vulnerabilities in the admin/editor console in Apache Roller before 5.0.1 allow remote attackers to hijack the authentication of admins or editors by leveraging the HTTP POST functionality.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Roller | through 5.0 Versions 0.9.5, 0.9.6, 0.9.6.3, 0.9.6.4, 0.9.7 |