PT-2013-5877
CVE-2013-5937
·
Publicado
2013-09-25
·
Atualizado
2017-08-29
Descrição por
CVSS 2.0
6.8
MédiaMétricasAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Click2Sell Suite module versions 6.x-1.x
Description
A cross-site request forgery issue allows remote attackers to hijack administrator authentication for requests that delete database information. This is achieved through vectors involving the Drupal Form API.
Recommendations
For Click2Sell Suite module versions 6.x-1.x, consider disabling the module until a patch is available to prevent exploitation. Restrict access to the module's functionality to minimize the risk of unauthorized database modifications. Avoid using the module for sensitive operations until the issue is resolved.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾