CVE-2012-1631

CVE-2012-1631

EPSS 0.6%

Cross-site request forgery (CSRF) vulnerability in the Admin:hover module for Drupal allows remote attackers to hijack the authentication of administrators for requests that unpublish all nodes, and possibly other actions, via unspecified vectors.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://drupal.org/node/1401644 http://drupal.org/node/1407206 https://exchange.xforce.ibmcloud.com/vulnerabilities/72386 http://www.openwall.com/lists/oss-security/2012/04/07/1 http://www.securityfocus.com/bid/51388