CVEvulnerability
CVE-2015-4383
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-06-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the Decisions module for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that remove individual voters via unspecified vectors.
Affected configurations
• decisions project decisions 6.x-1.1
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://www.openwall.com/lists/oss-security/2015/04/25/6 www.openwall.com
- http://www.securityfocus.com/bid/74344 www.securityfocus.com
- https://www.drupal.org/node/2459349 Patch, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2015/04/25/6 www.openwall.com
- http://www.securityfocus.com/bid/74344 www.securityfocus.com
- https://www.drupal.org/node/2459349 Patch, Vendor Advisory