Cross-site request forgery (CSRF) vulnerability in the Aggregator module in Drupal 6.x before 6.23 and 7.x before 7.11 allows remote attackers to hijack the authentication of unspecified victims for requests that update feeds and possibly cause a denial of service (loss of updates due to rate limit) via unspecified vectors.
References
| Link | Resource |
|---|---|
| http://www.debian.org/security/2013/dsa-2776 | |
| https://drupal.org/node/1425084 | Vendor Advisory |
| http://www.debian.org/security/2013/dsa-2776 | |
| https://drupal.org/node/1425084 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 01:35
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.debian.org/security/2013/dsa-2776 - | |
| References | () https://drupal.org/node/1425084 - Vendor Advisory |
Information
Published : 2013-10-28 22:55
Updated : 2024-11-21 01:35
NVD link : CVE-2012-0826
Mitre link : CVE-2012-0826
CVE.ORG link : CVE-2012-0826
JSON object : View
Products Affected
drupal
- drupal
CWE
CWE-352
Cross-Site Request Forgery (CSRF)