BLU-IC2 and BLU-IC4 Cross-Site Request Forgery Vulnerability

A vulnerability exists in BLU-IC2 and BLU-IC4 applications, both through version 1.19.5, due to a systemic failure to implement Cross-Site Request Forgery (CSRF) tokens. This lack of proper tokenization creates a security risk by allowing potential CSRF attacks, where an attacker could trick a user into performing actions they did not intend to.

Impact

The absence of CSRF token implementation leaves users vulnerable to Cross-Site Request Forgery attacks, where an attacker could exploit the user's session to perform unauthorized actions.