Csrf Vulnerability In 2.8.8 Bring Actively Exploited Options

[mbaldwin333]

Dear OpenX,

I would like to bring a security issue to your attention. OpenX Source 2.8.8 is vulnerable to cross site request forgery attacks and it is being actively exploited. Moreover, I have evidence that some of the attacks are originating from adserver.openx.org! The details of my investigation can be found at http://www.infosecstuff.com/openx-csrf-vul...vely-exploited/. This issue needs to be resolved as it is having a negative impact on the OpenX brand, including OpenX Enterprise. Either fix the issues or stop providing OpenX Source.

To the OpenX Source community, this vulnerability affects all versions of OpenX Source. OpenX Source users should be vigilant and follow the remediation tips in the article.

Thank You