CVE-2013-5471: Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Global Site Selector (GSS) al...

Security readout for executives and security teams

Cisco disclosed a CSRF flaw in Cisco Global Site Selector's web framework. If a targeted user is authenticated, an attacker may be able to hijack that user's authentication context. The source bundle does not provide affected versions, CVSS scoring, or a named fix. Exposure is most relevant where Cisco Global Site Selector is deployed and its web interface is reachable by administrators or users. The bundle does not identify affected versions or deployment conditions, so inventory confirmation is required. Treat this as an inventory and vendor-guidance check, not an emergency based on the supplied evidence. Prioritize faster if Cisco GSS administration is broadly reachable or supports critical traffic-routing operations. Mitigation focus: Identify whether Cisco Global Site Selector is present in the environment.; Check Cisco advisory guidance for affected releases and fixed versions.; Restrict management web interface access to trusted administrative networks..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.