CVEvulnerability
CVE-2015-4349
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-06-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete contact categories via unspecified vectors.
Affected configurations
• spider contacts project spider contacts
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://www.openwall.com/lists/oss-security/2015/04/25/6 www.openwall.com
- http://www.securityfocus.com/bid/72805 www.securityfocus.com
- https://www.drupal.org/node/2437973 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2015/04/25/6 www.openwall.com
- http://www.securityfocus.com/bid/72805 www.securityfocus.com
- https://www.drupal.org/node/2437973 Vendor Advisory