Detections
Analytics
CVE-2012-2380
high
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the admin/editor console in Apache Roller before 5.0.1 allow remote attackers to hijack the authentication of admins or editors by leveraging the HTTP POST functionality.
References
https://euvd.enisa.europa.eu/vulnerability/EUVD-2012-2368
http://archives.neohapsis.com/archives/fulldisclosure/2012-06/0376.html