Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2012-0826
HistoryOct 28, 2013 - 10:55 p.m.

CVE-2012-0826

2013-10-2822:55:00
CWE-352
[email protected]
web.nvd.nist.gov
34
cve-2012-0826
csrf
vulnerability
aggregator module
drupal 6.x
drupal 7.x
remote attackers
denial of service
nvd

6.9 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

39.6%

JSON

Cross-site request forgery (CSRF) vulnerability in the Aggregator module in Drupal 6.x before 6.23 and 7.x before 7.11 allows remote attackers to hijack the authentication of unspecified victims for requests that update feeds and possibly cause a denial of service (loss of updates due to rate limit) via unspecified vectors.

Related

cvelist 1
ubuntucve 1
prion 1
debiancve 1
openvas 4
nessus 2
freebsd 1
drupal 1
securityvulns 2
debian 1
cvelist
cvelist
CVE-2012-0826
2013-10-28 22:00:00
ubuntucve
ubuntucve
CVE-2012-0826
2013-10-28 00:00:00
prion
prion
Cross site request forgery (csrf)
2013-10-28 22:55:00
debiancve
debiancve
CVE-2012-0826
2013-10-28 22:55:00
openvas
openvas
FreeBSD Ports: drupal6
2012-02-12 00:00:00
FreeBSD Ports: drupal6
2012-02-12 00:00:00
Debian Security Advisory DSA 2776-1 (drupal6 - several vulnerabilities)
2013-10-11 00:00:00
nessus
nessus
FreeBSD : drupal -- multiple vulnerabilities (10720fe8-51e0-11e1-91c1-00215c6a37bb)
2012-02-08 00:00:00
Debian DSA-2776-1 : drupal6 - several vulnerabilities
2013-10-13 00:00:00
freebsd
freebsd
drupal -- multiple vulnerabilities
2012-02-01 00:00:00
drupal
drupal
SA-CORE-2012-001 - Drupal core multiple vulnerabilities
2012-02-01 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2776-1] drupal6 security update
2013-10-13 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2013-10-13 00:00:00
debian
debian
[SECURITY] [DSA 2776-1] drupal6 security update
2013-10-11 14:33:13

6.9 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

39.6%

JSON
Related for CVE-2012-0826
cvelist1ubuntucve1prion1debiancve1openvas4nessus2freebsd1drupal1securityvulns2debian1