CVE-2011-1664

Опубликовано: 10 апр. 2011

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in the Translation Management module 6.x before 6.x-1.21 for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Ссылки

http://drupal.org/node/1111174
Patch
Vendor Advisory
http://secunia.com/advisories/43950
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/66477
http://drupal.org/node/1111174
Patch
Vendor Advisory
http://secunia.com/advisories/43950
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/66477

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:icanlocalize:translation_management:6.x-1.0:*:*:*:*:*:*:*

cpe:2.3:a:icanlocalize:translation_management:6.x-1.0:beta1:*:*:*:*:*:*

cpe:2.3:a:icanlocalize:translation_management:6.x-1.0:beta2:*:*:*:*:*:*

cpe:2.3:a:icanlocalize:translation_management:6.x-1.0:beta3:*:*:*:*:*:*

cpe:2.3:a:icanlocalize:translation_management:6.x-1.0:beta4:*:*:*:*:*:*

cpe:2.3:a:icanlocalize:translation_management:6.x-1.0:beta5:*:*:*:*:*:*

cpe:2.3:a:icanlocalize:translation_management:6.x-1.0:beta6:*:*:*:*:*:*

cpe:2.3:a:icanlocalize:translation_management:6.x-1.0:beta7:*:*:*:*:*:*

cpe:2.3:a:icanlocalize:translation_management:6.x-1.1:*:*:*:*:*:*:*

cpe:2.3:a:icanlocalize:translation_management:6.x-1.2:*:*:*:*:*:*:*

cpe:2.3:a:icanlocalize:translation_management:6.x-1.2:beta1:*:*:*:*:*:*

cpe:2.3:a:icanlocalize:translation_management:6.x-1.3:*:*:*:*:*:*:*

cpe:2.3:a:icanlocalize:translation_management:6.x-1.4:*:*:*:*:*:*:*

cpe:2.3:a:icanlocalize:translation_management:6.x-1.5:*:*:*:*:*:*:*

cpe:2.3:a:icanlocalize:translation_management:6.x-1.6:*:*:*:*:*:*:*

cpe:2.3:a:icanlocalize:translation_management:6.x-1.7:*:*:*:*:*:*:*

cpe:2.3:a:icanlocalize:translation_management:6.x-1.8:*:*:*:*:*:*:*

cpe:2.3:a:icanlocalize:translation_management:6.x-1.9:*:*:*:*:*:*:*

cpe:2.3:a:icanlocalize:translation_management:6.x-1.20:*:*:*:*:*:*:*

cpe:2.3:a:icanlocalize:translation_management:6.x-1.x:dev:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*

EPSS

Процентиль: 30%

0.00108

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-vh49-4q7j-v7vc

github

около 3 лет назад