| Package | Affected versions | Patched versions |
|---|---|---|
| bdr suite | < 4.2.0 | 4.2.0 |
| offsite dr | = 4.2.0= 4.2.0.1 |
Various Vembu products allow an attacker to execute a (non-blind) http-only Cross Site Request Forgery (Other products or versions of products in this family may be affected too.)
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free