CVE-2012-2056

Content Lock (Drupal) is affected by a CSRF vulnerability due to the module not using a token for unlocking content, enabling an attacker to hijack the authentication of victims via CSRF vectors described in the Drupal advisory. Affected versions: all Content Lock releases. Exploitation details a...