dvs-inc/hotel-system — Issue #15: CSRF vulnerability in internal user management
Author: stwalkerster
Created: 2012-01-19 17:31:49+00:00
State: open
Labels: Bug

CRSF vulnerability allowing malicious sites to redirect users to well-defined URLs to make changes to the site on a user's behalf.

See MediaWiki's token system for an idea of how to fix this