2 matches found
CVE-2015-7233: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Import module is enabled, allows remote attackers to hijack the authentication of administrators for requests that create new OSF datasets via unspecified vectors...
5.1CVSS5.9AI score0.00536EPSS
SaveExploits0References2
PT-2015-7483
Name of the Vulnerable Software and Affected Versions Drupal OSF module versions 7.x-3.x before 7.x-3.1 Description A cross-site request forgery CSRF issue exists in the OSF module for Drupal. This issue allows remote attackers to hijack the authentication of administrators for requests that crea...
5.1CVSS0.00536EPSS
SaveExploits0References3
20