CVE-2012-3231: Multiple cross-site request forgery (CSRF) vulnerabilities in web@all 2.0, as downloaded before May 30, 201...

Security readout for executives and security teams

This issue affects web@all 2.0 copies downloaded before May 30, 2012. A malicious site could trick a logged-in administrator into making unwanted changes, including sensitive content changes. The CVE example indicates one administrative action could add a file that executes code. Exposure is likely limited to organizations still running legacy web@all 2.0, especially installations obtained before May 30, 2012. Risk depends on whether administrator sessions are reachable through browsers that may visit attacker-controlled pages. Treat as high priority only where legacy web@all 2.0 is still deployed. The business risk is unauthorized website changes or code execution through administrator compromise, but exposure should be uncommon because the software is old. Mitigation focus: Identify whether web@all 2.0 is present and when it was obtained.; Check vendor or archived advisory guidance for fixed downloads or upgrade instructions.; Restrict administrative interfaces to trusted networks or VPN access..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.