Learn about Edge Delivery Services in upcoming GEM session
SOLVED
csrf Vulnerability remediation
1 Accepted Solution
Correct answer by
Hi @akank_23!
Handling potential security vulnerabilities (incl. CSRF) can be a very individual process.
If you are referring to a vulnerability in AEM (the product; not custom code), please check the latest security fixes / service packs and their according release notes. If you have indications that the vulnerability may not yet be addressed, please reach out to Adobes customer care to make them aware of it.
You can reach customer care through the Adobe Admin Console. Please refer to this article on how to access the support portal and how to create a ticket. Some information about properly qualifying your request can be found here.
General recommendation before filing your ticket is:
- Ensure that you have the latest service packs installed.
- Ideally, the issue should be reproducible on a "vanilla" instance (means: a plain instance without any custom code). This will help customer care to reproduce the issue on their end.
If you are referring to a vulnerability in your projects code, there is some general advice as mentioned by @Ritesh_Mittal. Without knowledge about the details, it is hard to give any advice beyond that.
Hope that helps!
Hi @akank_23 ,
We have documentation available to prevent this-
If those are not helping then can you please explain what issue you are facing exactly?
Correct answer by
Hi @akank_23!
Handling potential security vulnerabilities (incl. CSRF) can be a very individual process.
If you are referring to a vulnerability in AEM (the product; not custom code), please check the latest security fixes / service packs and their according release notes. If you have indications that the vulnerability may not yet be addressed, please reach out to Adobes customer care to make them aware of it.
You can reach customer care through the Adobe Admin Console. Please refer to this article on how to access the support portal and how to create a ticket. Some information about properly qualifying your request can be found here.
General recommendation before filing your ticket is:
- Ensure that you have the latest service packs installed.
- Ideally, the issue should be reproducible on a "vanilla" instance (means: a plain instance without any custom code). This will help customer care to reproduce the issue on their end.
If you are referring to a vulnerability in your projects code, there is some general advice as mentioned by @Ritesh_Mittal. Without knowledge about the details, it is hard to give any advice beyond that.
Hope that helps!
