GH Webwork actions are vulnerable to XSRF.

XMLWordPrintable

      GHCreateNewIssue.jspa is not protected against XSRF attacks.
      Impact: It is possible for an attacker to make a victim create new issues on the victim's JIRA instance through this bug in GHCreateNewIssue.jspa.

          1.
          		 Add XSRF protection to LicenseAction Sub-task Closed Unassigned
          2.
          		 Add XSRF protection to ConfigurationAction and subclasses (Global and Project) for all page pop methods Sub-task Closed Unassigned
          3.
          		 Add XSRF protection to SetIssueDisplay on CardBoardAction Sub-task Closed Unassigned

              Assignee:
              Michael Tokar
              Reporter:
              David Black
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: