(ok 4.4.6.1) CSRF in setup

A software tool to bring MySQL to the Web

Brought to you by: ibennetch, nijel

#4899 (ok 4.4.6.1) CSRF in setup

Milestone: 4.4.0

Status: fixed

Owner: nobody

Labels: None

Priority: Low

Updated: 2015-05-13

Created: 2015-05-11

Creator: Madhura Jayaratne

Private: No

As reported by Inti De Ceukelaire, it is possible to perform a CSRF attack on setup due to the lack of CSRF token in a url

Discussion

Marc Delisle - 2015-05-13

summary: CSRF in setup --> (ok 4.4.6.1) CSRF in setup

status: open --> fixed

private: Yes --> No

Priority: Normal --> Low
If you would like to refer to this comment somewhere else in this project, copy and paste the following link: