CVE-2015-4397

2015-06-1514:00:00

mitre

www.cve.org

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

40.0%

JSON

Cross-site request forgery (CSRF) vulnerability in the Node Template module for Drupal allows remote attackers to hijack the authentication of users with the “access node template” permission for requests that delete node templates via unspecified vectors.

References

www.openwall.com/lists/oss-security/2015/04/25/6

www.drupal.org/node/2475955