| Package | Affected versions | Patched versions |
|---|---|---|
| experience manager | ≥ 14.1.0, ≤ 14.2.2 |
An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows CSRF if the attacker uses GET where POST was intended.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free