cross-site request forgery vulnerability

Posted on September 17, 2013 at 8:13am

Hello,

is this vulnerability issue

http://www.cvedetails.com/cve/CVE-2011-1911/

solved in current version (JasperReports Server Community Edition v5.2.0)?

Thank You

 

Marek

JasperReports® Server
marek.pospisil's picture
marek.pospisil
3
Joined: Sep 17 2013 - 6:48am
Last seen: 9 years 6 months ago

3 Answers:

Posted on September 17, 2013 at 3:32pm

Jaspersoft implements OWASP CSRFGuard:  https://www.owasp.org/index.php/Category:OWASP_CSRFGuard_Project

djohnson53's picture
djohnson53
166388
Joined: May 25 2012 - 11:10am
Last seen: 1 year 7 months ago
Posted on September 20, 2013 at 2:52pm

Another reference to help you: http://community.jaspersoft.com/wiki/jaspersoft-security-changes-and-configuration

djohnson53's picture
djohnson53
166388
Joined: May 25 2012 - 11:10am
Last seen: 1 year 7 months ago
Posted on September 23, 2013 at 2:13am

Thank You very much.

marek.pospisil's picture
marek.pospisil
3
Joined: Sep 17 2013 - 6:48am
Last seen: 9 years 6 months ago
Feedback