CSRF Bypass Risk CVE-2011-0447 Posted on 10 February 2011 by kosmas Security announcement about CSRF protection bypass. Full details here Affected versions 2.x.x and 3.0.x