Multiple cross-site request forgery (CSRF) vulnerabilities in TangoCMS before 2.2.0 allow remote attackers to hijack the authentication of administrators.
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Link | Tags |
---|---|
http://osvdb.org/50777 | vdb entry |
http://tangocms.org/article/view/2.2.0-eagle-released%21 | |
http://secunia.com/advisories/33206 | third party advisory vendor advisory |