PT-2012-3046
CVE-2012-1057
·
تاريخ النشر
2012-02-14
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
6.0
متوسطةالمقاييسAV:N/AC:M/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Drupal Forward module versions 6.x-1.x through 6.x-1.20
Drupal Forward module versions 7.x-1.x through 7.x-1.2
Description
A cross-site request forgery (CSRF) issue exists in the clickthrough tracking functionality of the Forward module, potentially related to improper flood control. This allows remote attackers to hijack the authentication of administrators for requests that increase node rankings via the tracking code.
Recommendations
For Drupal Forward module version 6.x-1.x, update to version 6.x-1.21 or later.
For Drupal Forward module version 7.x-1.x, update to version 7.x-1.3 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾