The attacker can easily reuse the view state obtained making legal access to the page to build a bogus request on behalf of another user.

• 攻击者可以轻松地重用所获取的视图状态,冒充另一个用户合法地访问该页,以生成虚假请求。