Lucene search
MitreCVE-2015-7233HistorySep 17, 2015 - 4:59 p.m.
CVE-2015-7233
2015-09-1716:59:12
CWE-352
mitre
web.nvd.nist.gov
28
cve-2015-7233
cross-site request forgery
csrf vulnerability
osf module
drupal
nvd
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
AI Score
7.3
Confidence
Low
EPSS
0.001
Percentile
35.5%
Cross-site request forgery (CSRF) vulnerability in the OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Import module is enabled, allows remote attackers to hijack the authentication of administrators for requests that create new OSF datasets via unspecified vectors.
Affected configurations
Node
structured_dynamicsopen_semantic_frameworkMatch7.x-3.0drupal
ORstructured_dynamicsopen_semantic_frameworkMatch7.x-3.xdevdrupal
| Vendor | Product | Version | CPE |
|---|---|---|---|
| structured_dynamics | open_semantic_framework | 7.x-3.0 | cpe:2.3:a:structured_dynamics:open_semantic_framework:7.x-3.0:*:*:*:*:drupal:*:* |
| structured_dynamics | open_semantic_framework | 7.x-3.x | cpe:2.3:a:structured_dynamics:open_semantic_framework:7.x-3.x:dev:*:*:*:drupal:*:* |
Related
nvd
nvd
CVE-2015-7233
2015-09-17 16:59:12
cvelist
cvelist
CVE-2015-7233
2015-09-17 16:00:00
prion
prion
Cross site request forgery (csrf)
2015-09-17 16:59:00
drupal
drupal
OSF for Drupal - Critical - Multiple vulnerabilities - SA-CONTRIB-2015-134
2015-07-22 00:00:00
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
AI Score
7.3
Confidence
Low
EPSS
0.001
Percentile
35.5%
Related for CVE-2015-7233