Lucene search
+L

3 matches found

BDU FSTEC
BDU FSTEC
added 2025/02/06 12:0 a.m.9 views

The vulnerability of the Gutenberg module in the Drupal CMS system, which allows a hacker to perform a CSRF attack

The vulnerability of the Gutenberg module in the Drupal CMS system is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

10CVSS5.2AI score0.00196EPSS
SaveExploits0References2Affected Software1
Drupal
Drupal
added 2024/10/09 12:0 a.m.9 views

Gutenberg - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-048

This module provides a new UI experience for node editing using the Gutenberg Editor library. The module did not sufficiently protect some routes against a Cross Site Request Forgery attack. This vulnerability is mitigated by the fact that the tricked user needs to have an active session with the...

8.8CVSS7.1AI score0.00196EPSS
SaveExploits0References12
Patchstack
Patchstack
added 2024/10/09 12:0 a.m.7 views

Drupal Gutenberg module < 2.13.0,3.0.0-3.0.4 - Unauthenticated Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF vulnerability discovered by Mingsong in WordPress Module Gutenberg versions 2.13.0,3.0.0-3.0.4...

7AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder