PT-2015-6176

Name of the Vulnerable Software and Affected Versions Drupal module Batch Jobs versions prior to 7.x-1.2 Description The issue allows remote attackers to hijack the authentication of certain users for requests, specifically to delete a batch job record or execute a task. Recommendations For...

CVE-2015-3355: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Batch Jobs module before 7.x-1.2 for Drupal allow remote attackers to hijack the authentication of certain users for requests that 1 delete a batch job record or 2 execute a task via unspecified vectors...