CSRF @ SendMessage.java

[scott-cx]

CSRF issue exists @ SendMessage.java in branch master

Method processRequest at line 42 of /src/main/java/org/cysecurity/cspf/jvl/controller/SendMessage.java gets a parameter from a user request from ""recipient"". This parameter value flows through the code and is eventually used to access application state altering functionality. This may enable Cross-Site Request Forgery (CSRF).

Namespace: scott-cx
Repository: winter
Repository Url: https://github.com/scott-cx/winter
CxAST-Project: scott-cx/winter
CxAST platform scan: 5d347788-2ed1-4f75-a829-ec3822e0131d
Branch: master
Application: winter
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
CWE: 352
Lines: 42 43 44 45

---

References
Read more