TemporaryAvatarController.save is vulnerable to CSRF/XSRF

XMLWordPrintable

      As pointed out in STASH-5335, the
      TemporaryAvatarController.save resource is vulnerable to CSRF. Currently there appears to be no impact of it being vulnerable except for making a user upload a temporary avatar file (which are periodically deleted).

              Assignee:
              Marcin (Inactive)
              Reporter:
              David Black
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: