Security Advisory

CVE-2013-1972

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2013-06-24 16:13:00
Last updated 2024-08-06 15:20:37
Assigner redhat
State PUBLISHED

Description

Cross-site request forgery (CSRF) vulnerability in the elFinder file manager module 6.x-0.x before 6.x-0.8 and 7.x-0.x before 7.x-0.8 for Drupal allows remote attackers to hijack the authentication of unspecified victims to create, modify, or delete files via unknown vectors.