Lucene search
HistoryJun 15, 2015 - 2:59 p.m.
CVE-2015-4397
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.001
Percentile
40.0%
Cross-site request forgery (CSRF) vulnerability in the Node Template module for Drupal allows remote attackers to hijack the authentication of users with the “access node template” permission for requests that delete node templates via unspecified vectors.
Affected configurations
Node
node_template_projectnode_templatedrupal
| Vendor | Product | Version | CPE |
|---|---|---|---|
| node_template_project | node_template | * | cpe:2.3:a:node_template_project:node_template:*:*:*:*:*:drupal:*:* |
Related
drupal
drupal
prion
prion
Cross site request forgery (csrf)
2015-06-15 14:59:00
cve
cve
CVE-2015-4397
2015-06-15 14:59:52
cvelist
cvelist
CVE-2015-4397
2015-06-15 14:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.001
Percentile
40.0%
Related for NVD:CVE-2015-4397