CVE-2012-1636

The CVE-2012-1636 entry concerns the Drupal stickynote module (7.x-1.x) with a CSRF vulnerability that allows remote attackers to hijack user authentication for requests that delete stickynotes. Affected versions are prior to 7.x-1.1. The issue’s exploitation is described as CSRF without explicit...