Monday, August 9, 2010

BXR : HTB22503 - XSRF (CSRF) in BXR vulnerability

Users of BXR please be advised of a HTB22503 - XSRF (CSRF) in BXR vulnerability that has been identified.

To view this vulnerability, possible remedies, and others please check out the Security Advisories at Critical Watch (http://criticalwatch.com/support/security-advisories.aspx)

Amplify’d from www.criticalwatch.com
HTB22503: HTB22503 - XSRF (CSRF) in BXR
BXR
Vulnerability Details:

The vulnerability exists due to failure in the "/user/update" script to properly verify the source of HTTP request.
Read more at www.criticalwatch.com
 

No comments:

Post a Comment