Description
SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism and hijack the authentication of administrators via vectors related to "form action requests" using a controller.
Remediation
References
Related Vulnerabilities
Internet Information Services Other Vulnerability (CVE-2002-1744)
Joomla! Core Cross-Site Scripting (1.5.0 - 3.8.3)
WordPress Plugin Theme Blvd Widget Areas Multiple Security Bypass Vulnerabilities (1.2.2)
WordPress Plugin Background Music Cross-Site Scripting (1.0)
WordPress Plugin VR Calendar Cross-Site Request Forgery (2.3.3)