Lucene search
PRIOn knowledge basePRION:CVE-2015-3370HistoryApr 21, 2015 - 4:59 p.m.
Cross site request forgery (csrf)
2015-04-2116:59:00
PRIOn knowledge base
www.prio-n.com
1
Cross-site request forgery (CSRF) vulnerability in the Node Invite module before 6.x-2.5 for Drupal allows remote attackers to hijack the authentication of users with the “node_invite_can_manage_invite” permission for requests that re-enable node invitations via unspecified vectors.
| CPE | Name | Operator | Version |
|---|---|---|---|
| node_invite | eq | <= 6.x-2.3 |
Related
cvelist
cvelist
CVE-2015-3370
2015-04-21 16:00:00
nvd
nvd
CVE-2015-3370
2015-04-21 16:59:29
cve
cve
CVE-2015-3370
2015-04-21 16:59:29
drupal
drupal
SA-CONTRIB-2015-032 - Node Invite - Multiple vulnerabilities
2015-01-28 00:00:00
kaspersky
kaspersky
KLA10563 Multiple vulnerabilities in Drupal modules
2015-04-21 00:00:00