description: Cross-site request forgery is facilitated by OpenCATS failure to require CSRF tokens in POST requests. An attacker can exploit this issue by creating a dummy page that executes Javascript in an authenticated user's session when visited.
problem types: Cross-Site Request Forgery
affected:
{
vendor: n/a
product: OpenCATS
versions:
version: 0.9.6, status: affected
}