CSRF @ adminlogin.jsp #115

CSRF issue exists @ adminlogin.jsp in branch master

Method adminlogin at line 12 of /src/main/webapp/admin/adminlogin.jsp gets a parameter from a user request from ""password"". This parameter value flows through the code and is eventually used to access application state altering functionality. This may enable Cross-Site Request Forgery (CSRF).

Namespace: tyleragypt
Repository: JavaVulnerableLab
Repository Url: https://github.com/tyleragypt/JavaVulnerableLab
CxAST-Project: tyleragypt/JavaVulnerableLab
CxAST platform scan: ed818de8-dcb5-45a8-b341-97dfdf4127b8
Branch: master
Application: JavaVulnerableLab
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
CWE: 352
Lines: 11 12

References
Read more