Security Advisory

CVE-2012-4386

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-09-05 23:00:00

Last updated 2024-08-06 20:35:09

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

The token check mechanism in Apache Struts 2.0.0 through 2.3.4 does not properly validate the token name configuration parameter, which allows remote attackers to perform cross-site request forgery (CSRF) attacks by setting the token name configuration parameter to a session attribute.

← Browse all CVEs View on cve.org ↗