Description

Cross-site request forgery (CSRF) vulnerability in logout.action in Atlassian Confluence 3.4.6 allows remote attackers to hijack the authentication of administrators for requests that logout the user via a comment.

Remediation

References

CVE-2012-6342

Related Vulnerabilities

WordPress Plugin Highlight Cross-Site Scripting (0.9.2)

WordPress Plugin Search Types Custom Fields Widget Unspecified Vulnerability (1.3)

SugarCRM CVE-2023-35809 Vulnerability (CVE-2023-35809)

Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-5519)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-20279)

Severity

Medium

Classification

CVE-2012-6342 CWE-352

Tags

Missing Update Known Vulnerabilities