Threats tagged 'ghsa-v94h-g9fm-f24x'

IBM API Connect versions 12.1.0.0 through 12.1.1.2 are vulnerable to a cross-site request forgery (CSRF) issue that could allow a remote attacker to force a user to authenticate into an attacker-controlled account. The vulnerability arises because the sign-in flow does not properly verify that a login response corresponds to the user's own authentication request, potentially linking the victim's session to the attacker's account.