PT-2019-6754
CVE-2012-2079
·
Publicado
2019-11-21
·
Atualizado
2019-12-11
Descrição por
CVSS 2.0
6.8
MédiaMétricasAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Activity module versions 6.x-1.x for Drupal
Description
A cross-site request forgery (CSRF) issue exists in the Activity module. This type of issue allows an attacker to trick a user into performing unintended actions on a web application that the user is authenticated to.
Recommendations
For Activity module versions 6.x-1.x, update the module to a version that includes a fix for this issue, as using an outdated version poses a significant risk.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾