Description
Cross-site request forgery (CSRF) vulnerability in the Web Console (web-console) in Red Hat Enterprise Application Platform before 6.4.4 and WildFly (formerly JBoss Application Server) before 2.0.0.CR9 allows remote attackers to hijack the authentication of administrators for requests that make arbitrary changes to an instance via vectors involving a file upload using a multipart/form-data submission.
Remediation
References
Related Vulnerabilities
WordPress Plugin Chatbot with IBM Watson Cross-Site Scripting (0.8.20)
Oracle Database Server CVE-2015-4857 Vulnerability (CVE-2015-4857)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3126)
Oracle HTTP Server Out-of-bounds Read Vulnerability (CVE-2021-35940)