PT-2012-6019
CVE-2012-5549
·
تاريخ النشر
2012-12-03
·
تاريخ التحديث
2012-12-04
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Drupal versions 6.x through 7.x
Description
A cross-site request forgery (CSRF) issue in the Time Spent module for Drupal allows remote attackers to hijack the authentication of victims.
Recommendations
For versions 6.x through 7.x, update the Time Spent module to a version that includes the fix for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾