Threats tagged 'ghsa-gjp8-99fv-cgcw'

Apache Geode versions 1.10.0 through 1.15.1 are vulnerable to Cross-Site Request Forgery (CSRF) attacks via GET requests to the Management and Monitoring REST API. An attacker who tricks a user into exposing their Geode session credentials could submit malicious commands on behalf of the authenticated user. The issue is fixed in version 1.15.2.