CVE-2012-2713

The Drupal 7.x BrowserID (Mozilla Persona) module (7.x-1.x) is affected by a CSRF vulnerability that could allow an attacker to hijack a user’s authentication when logging into another site. The issue arises from insufficient validation of authentication requests. It is fixed in BrowserID 7.x-1.3...