Subrion 3.3.0 Cross Site Request Forgery

Subrion version 3.3.0 suffers from a cross site request forgery vulnerability that allows for arbitrary SQL injection.