CVE-2008-1981

Опубликовано: 27 апр. 2008

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0 beta1, a Drupal module, allows remote attackers to perform unauthorized actions as other users via unspecified vectors.

Ссылки

http://drupal.org/node/250408
Patch
Third Party Advisory
http://secunia.com/advisories/29960
Third Party Advisory
http://www.vupen.com/english/advisories/2008/1353/references
Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/41978
Tool Signature
VDB Entry
http://drupal.org/node/250408
Patch
Third Party Advisory
http://secunia.com/advisories/29960
Third Party Advisory
http://www.vupen.com/english/advisories/2008/1353/references
Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/41978
Tool Signature
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:e-publish_project:e-publish:5.x-1.0:*:*:*:*:drupal:*:*

cpe:2.3:a:e-publish_project:e-publish:5.x-1.x:dev:*:*:*:drupal:*:*

cpe:2.3:a:e-publish_project:e-publish:6.x-1.x:dev:*:*:*:drupal:*:*

EPSS

Процентиль: 53%

0.00301

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-38pr-3m4v-749g

github

почти 4 года назад