Lucene search
HistoryJun 15, 2015 - 2:59 p.m.
CVE-2015-4352
cve-2015-4352
csrf
drupal
spider video player
vulnerability
remote attackers
authentication hijacking
video deletion
7.3 High
AI Score
Confidence
Low
5.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
0.002 Low
EPSS
Percentile
53.4%
Cross-site request forgery (CSRF) vulnerability in the Spider Video Player module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete videos via unspecified vectors.
Affected configurations
Node
web-doradoweb-dorado_spider_video_playerMatch-drupal
| CPE | Name | Operator | Version |
|---|---|---|---|
| web-dorado:web-dorado_spider_video_player | web-dorado web-dorado spider video player | eq | - |
Related
prion
prion
Cross site request forgery (csrf)
2015-06-15 14:59:00
nvd
nvd
CVE-2015-4352
2015-06-15 14:59:07
cvelist
cvelist
CVE-2015-4352
2015-06-15 14:00:00
drupal
drupal
7.3 High
AI Score
Confidence
Low
5.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
0.002 Low
EPSS
Percentile
53.4%
Related for CVE-2015-4352