CVE-2012-3343 Information

Description

Cross-site request forgery (CSRF) vulnerability in Microdasys before 3.5.1-B708 as used in Bloxx Web Filtering before 5.0.14 and other products allows remote attackers to hijack the authentication of arbitrary users for requests that trigger error pages containing XSS sequences a different vulnerability than CVE-2012-2564.

Reference

http://www.kb.cert.org/vuls/id/722963 http://www.kb.cert.org/vuls/id/MAPG-8R9LBY

Share on: