CVEvulnerability
CVE-2015-3388
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-04-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the Commerce Balanced Payments module for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that delete the user's configured bank accounts via unspecified vectors.
Affected configurations
• balanced commerce balanced payments (<= 7.x-1.2)
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://www.openwall.com/lists/oss-security/2015/02/13/12 www.openwall.com
- http://www.securityfocus.com/bid/72615 www.securityfocus.com
- https://www.drupal.org/node/2424435 Patch, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2015/02/13/12 www.openwall.com
- http://www.securityfocus.com/bid/72615 www.securityfocus.com
- https://www.drupal.org/node/2424435 Patch, Vendor Advisory