Maniphest T73848

Ensure CSRF tokens are used upon various form submissions
Open, LowPublicBUG REPORT
Actions

Assigned To

None

Authored By

	Nemo_bis
	Oct 8 2014, 9:57 PM

Tags

Referenced Files

None

Subscribers

Description

*http://web.archive.org/web/20110600000000/http://code.pediapress.com/wiki/ticket/629

Protect all requests that modify the session against CSRF
new – jojo – normal – major – 2 years
Nothing in bugzilla (unless it's in Security)
anomie> Nemo_bis: Presumably adding CSRF tokens to various form submissions.

I doubt it was ever looked into.

Version: unspecified
Severity: normal

Details

Reference: bz71848

Event Timeline

• bzimport raised the priority of this task from to Needs Triage.Nov 22 2014, 3:57 AM

• bzimport added a project: Collection.

• bzimport set Reference to bz71848.

• bzimport added a subscriber: Unknown Object (MLST).

Nemo_bis created this task.Oct 8 2014, 9:57 PM

Reedy removed a subscriber: • wikibugs-l-list.Nov 29 2015, 2:06 PM

Restricted Application added a project: Internet-Archive. · View Herald TranscriptNov 29 2015, 2:06 PM

Restricted Application added subscribers: StudiesWorld, Aklapper. · View Herald Transcript

Aklapper removed a subscriber: Anomie.Oct 16 2020, 5:01 PM

Harej removed a project: Internet-Archive.Nov 2 2021, 7:35 PM

Aklapper added a project: Vuln-CSRF.Feb 4 2022, 8:01 PM

Aklapper triaged this task as Low priority.Feb 4 2022, 8:07 PM

Aklapper changed the subtype of this task from "Task" to "Bug Report".