Lucene search
HistoryDec 12, 2007 - 1:46 a.m.
CVE-2007-6320
drupal
module
csrf
4.7.x-dev
5.x-dev
security
vulnerability
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
34.4%
Feature 4.7.x-dev and 5.x-dev before 20071206, a Drupal module, does not follow Drupal’s Forms API submission model, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks.
Affected configurations
Node
drupalfeature_moduleMatch4.7.x_dev
ORdrupalfeature_moduleMatch5.x_dev
| CPE | Name | Operator | Version |
|---|---|---|---|
| drupal:feature_module | drupal feature module | eq | 4.7.x_dev |
| drupal:feature_module | drupal feature module | eq | 5.x_dev |
References
Related
prion
prion
Cross site request forgery (csrf)
2007-12-12 01:46:00
cvelist
cvelist
CVE-2007-6320
2007-12-12 01:00:00
nvd
nvd
CVE-2007-6320
2007-12-12 01:46:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
34.4%
Related for CVE-2007-6320