CVEvulnerability
CVE-2012-2057
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-09-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the Ubercart Bulk Stock Updater module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors related to formAPI.
Affected configurations
• miura ubercart bulk stock updater
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://drupal.org/node/1482126 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2012/04/07/1 www.openwall.com
- http://www.securityfocus.com/bid/52502 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74054 exchange.xforce.ibmcloud.com
- http://drupal.org/node/1482126 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2012/04/07/1 www.openwall.com
- http://www.securityfocus.com/bid/52502 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74054 exchange.xforce.ibmcloud.com