Cross-site request forgery (CSRF) vulnerability in Cherokee-admin in Cherokee before 1.2.99 allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences, as demonstrated by a crafted nickname field to vserver/apply.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2011-10-07 02:51
Updated : 2024-02-28 11:41
NVD link : CVE-2011-2191
Mitre link : CVE-2011-2191
CVE.ORG link : CVE-2011-2191
JSON object : View
Products Affected
cherokee-project
- cherokee
CWE
CWE-352
Cross-Site Request Forgery (CSRF)