Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-18408

ForgotUsername is not protected against CSRF

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 12.10.4, 13.1-rc-1
    • Fix Version/s: 12.10.5, 13.2-rc-1
    • Component/s: Administration
    • Labels:
      None
    • Difficulty:
      Unknown
    • Documentation:
      N/A
    • Documentation in Release Notes:
      N/A
    • Similar issues:

      Attachments

        Issue Links

        is related to

        Bug - A problem which impairs or prevents the functions of the product. XWIKI-18384 The "Forgot your username?" form offers too much information concerning user accounts

        • Major - Major loss of function.
        • Closed
        links to

        Web Link Github security advisory

          Activity

            People

            Assignee:
            surli Simon Urli
            Reporter:
            surli Simon Urli
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: