CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
Percentile
99.7%
Decisions module is a replacement for the Poll module and provides advanced voting systems and decision-making tools.
The module doesn’t sufficiently protect some links against CSRF. A malicious user can cause another user to remove individual voters by getting their browser to make a request to a specially-crafted URL.
Drupal core is not affected. If you do not use the contributed Decisions module, there is nothing you need to do.
If you use the Decisions module you should uninstall it.
Also see the Decisions project page.
Not applicable.