CVE-2012-1633

Name of the Vulnerable Software and Affected Versions Drupal Password Policy module versions prior to 6.x-1.4 Drupal Password Policy module versions prior to 7.x-1.0 beta3

Description A cross-site request forgery (CSRF) issue exists in the Password Policy module, allowing remote attackers to hijack the authentication of administrative users for requests that unblock a user.

Recommendations For versions prior to 6.x-1.4, update to version 6.x-1.4 or later. For versions prior to 7.x-1.0 beta3, update to version 7.x-1.0 beta3 or later.