Impact
What kind of vulnerability is it? Who is impacted?
Cross Site Request Forgery (CSRF) affects applications with forms that do not use unique tokens and servers with multiple instances of the same application.
Patches
Has the problem been patched? What versions should users upgrade to?
Application needs tokens added to forms
Workarounds
Is there a way for users to fix or remediate the vulnerability without upgrading?
Do not expose applications to users, especially multiple instances to users until this application is upgraded.
References
Are there any links users can visit to find out more?
(https://owasp.org/www-community/attacks/csrf)
Impact
What kind of vulnerability is it? Who is impacted?
Cross Site Request Forgery (CSRF) affects applications with forms that do not use unique tokens and servers with multiple instances of the same application.
Patches
Has the problem been patched? What versions should users upgrade to?
Application needs tokens added to forms
Workarounds
Is there a way for users to fix or remediate the vulnerability without upgrading?
Do not expose applications to users, especially multiple instances to users until this application is upgraded.
References
Are there any links users can visit to find out more?
(https://owasp.org/www-community/attacks/csrf)