CVE-2012-2061

CVE-2012-2061

EPSS 0.7%

Cross-site request forgery (CSRF) vulnerability in the Admin tools module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors involving "not checking tokens."

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://drupal.org/node/1482126 https://exchange.xforce.ibmcloud.com/vulnerabilities/74058 http://www.openwall.com/lists/oss-security/2012/04/07/1 http://www.securityfocus.com/bid/52502