Kriti Gupta created OPENMEETINGS-947:
----------------------------------------
Summary: Cross-Site Request Forgery
Key: OPENMEETINGS-947
URL: https://issues.apache.org/jira/browse/OPENMEETINGS-947
Project: Openmeetings
Issue Type: Test
Environment: Windows 8
Reporter: Kriti Gupta
Priority: Critical
A cross-site request forgery (CSRF) vulnerability occurs when:
1. A Web application uses session cookies.
2. The application acts on an HTTP request without verifying that the request
was made with the user's consent.
In this case the application generates HTTP request via a form post at
Check.jsp line 16.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
