Lucene search
MitreCVE-2015-4397HistoryJun 15, 2015 - 2:59 p.m.
CVE-2015-4397
2015-06-1514:59:52
CWE-352
mitre
web.nvd.nist.gov
23
drupal
csrf
vulnerability
node template
cve-2015-4397
nvd
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.3
Confidence
Low
EPSS
0.001
Percentile
40.0%
Cross-site request forgery (CSRF) vulnerability in the Node Template module for Drupal allows remote attackers to hijack the authentication of users with the “access node template” permission for requests that delete node templates via unspecified vectors.
Affected configurations
Node
node_template_projectnode_templatedrupal
| Vendor | Product | Version | CPE |
|---|---|---|---|
| node_template_project | node_template | * | cpe:2.3:a:node_template_project:node_template:*:*:*:*:*:drupal:*:* |
Related
drupal
drupal
nvd
nvd
CVE-2015-4397
2015-06-15 14:59:52
prion
prion
Cross site request forgery (csrf)
2015-06-15 14:59:00
cvelist
cvelist
CVE-2015-4397
2015-06-15 14:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.3
Confidence
Low
EPSS
0.001
Percentile
40.0%
Related for CVE-2015-4397