CVE-2012-2307

2012-07-2521:00:00

redhat

www.cve.org

cve-2012-2307

cross-site request forgery

drupal 6.x-4.2

addressbook module

AI Score

7.1

Confidence

Low

EPSS

0.002

Percentile

52.8%

JSON

Cross-site request forgery (CSRF) vulnerability in the Addressbook module for Drupal 6.x-4.2 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

References

drupal.org/node/1557868

www.openwall.com/lists/oss-security/2012/05/03/1

www.openwall.com/lists/oss-security/2012/05/03/2