Описание
Cross-site request forgery (CSRF) vulnerability in Drupal 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of OpenID identities.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | not-affected | code not present |
| devel | DNE | |
| feisty | not-affected | code not present |
| gutsy | DNE | |
| hardy | DNE | |
| upstream | released | 6.3 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | DNE | |
| devel | not-affected | code not present |
| feisty | DNE | |
| gutsy | not-affected | code not present |
| hardy | not-affected | code not present |
| upstream | released | 6.3 |
Показывать по
Ссылки на источники
EPSS
4.3 Medium
CVSS2
Связанные уязвимости
Cross-site request forgery (CSRF) vulnerability in Drupal 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of OpenID identities.
Cross-site request forgery (CSRF) vulnerability in Drupal 6.x before 6 ...
Cross-site request forgery (CSRF) vulnerability in Drupal 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of OpenID identities.
EPSS
4.3 Medium
CVSS2