PT-2006-6191
CVE-2006-5476
·
Publicado
2006-10-24
·
Atualizado
2018-10-17
Descrição por
CVSS 2.0
7.5
AltaMétricasAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Drupal versions 4.6.x through 4.6.9
Drupal versions 4.7.x through 4.7.3
Description
A cross-site request forgery issue allows remote attackers to perform unauthorized actions as an arbitrary user via unspecified vectors.
Recommendations
For versions 4.6.x through 4.6.9, update to version 4.6.10 or later.
For versions 4.7.x through 4.7.3, update to version 4.7.4 or later.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾