PT-2010-5522
CVE-2010-4519
·
Published
2010-12-23
·
Updated
2010-12-27
Description by
CVSS 2.0
6.8
MediumMetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Drupal Views module versions 5.x before 5.x-1.8
Drupal Views module versions 6.x before 6.x-2.11
Description
The issue affects the Views UI implementation in the Views module for Drupal, where multiple cross-site request forgery (CSRF) vulnerabilities are present. These vulnerabilities allow remote attackers to hijack the authentication of administrators for specific requests, including enabling or disabling all Views.
Recommendations
For Drupal Views module version 5.x, update to version 5.x-1.8 or later.
For Drupal Views module version 6.x, update to version 6.x-2.11 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾