Re: CVE request: CSRF in eXtplorer

[Moritz Muehlenhoff <jmm () debian org>]

Kurt Seifried wrote:

> > John Leitch has discovered a CSRF vulnerability in eXtplorer: 
> > http://www.autosectools.com/Advisories/eXtplorer.2.1.RC3_Cross- 
> > site.Request.Forgery_174.html
> >
> > Can you please assign a CVE id to it?
> >
> > Cheers, luciano
>
> Does this affect any versions other than just 2.1 RC3?

The upstream version, which is in Debian stable (2.1.0b6,
I suppose that refers to beta6) is affected and was released 
in 2010, so this is not just a regression in a short-lived 
release candidate.

Cheers,
        Moritz