PT-2019-6754
CVE-2012-2079
·
تاريخ النشر
2019-11-21
·
تاريخ التحديث
2019-12-11
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Activity module versions 6.x-1.x for Drupal
Description
A cross-site request forgery (CSRF) issue exists in the Activity module. This type of issue allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.
Recommendations
For Activity module versions 6.x-1.x, update the module to a version that includes a fix for this issue, as using an outdated version poses a significant risk.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾