Beveiligingsadvies

CVE-2012-2097

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2012-08-14 21:00:00
Laatst bijgewerkt 2024-08-06 19:26:07
Toegewezen door redhat
CVSS-score geen score
Status PUBLISHED

Beschrijving

Cross-site request forgery (CSRF) vulnerability in the Autosave module 6.x before 6.x-2.10 and 7.x-2.x before 7.x-2.0 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests involving "submitting saved results to a node."