Cross site request forgery (csrf)

2013-03-2721:55:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.3%

JSON

Cross-site request forgery (CSRF) vulnerability in the Taxonomy Manager (taxonomy_manager) module 6.x-2.x before 6.x-2.2 and 7.x-1.x before 7.x-1.0-rc1 for Drupal allows remote attackers to hijack the authentication of users with ‘administer taxonomy’ permissions via unspecified vectors.

CPENameOperatorVersion
taxonomy_managereq6.120.20
taxonomy_managereq6.120.21
taxonomy_managereq6.x-2.x dev
taxonomy_managereq7.x-1.0 alpha1
taxonomy_managereq7.x-1.0 alpha2
taxonomy_managereq7.x-1.0 beta3
taxonomy_managereq7.x-1.0 beta2
taxonomy_managereq7.x-1.0 alpha3
taxonomy_managereq7.x-1.0 alpha4
taxonomy_managereq7.x-1.0 beta1

Name	Operator	Version
taxonomy_manager	eq	6.120.20
taxonomy_manager	eq	6.120.21
taxonomy_manager	eq	6.x-2.x dev
taxonomy_manager	eq	7.x-1.0 alpha1
taxonomy_manager	eq	7.x-1.0 alpha2
taxonomy_manager	eq	7.x-1.0 beta3
taxonomy_manager	eq	7.x-1.0 beta2
taxonomy_manager	eq	7.x-1.0 alpha3
taxonomy_manager	eq	7.x-1.0 alpha4
taxonomy_manager	eq	7.x-1.0 beta1