1 matches found
MGASA-2013-0359 Updated drupal package fixes security vulnerabilities
Drupal's form API has built-in cross-site request forgery CSRF validation, and also allows any module to perform its own validation on the form. In certain common cases, form validation functions may execute unsafe operations CVE-2013-6385. Drupal core directly used the mtrand pseudorandom number...
6.8CVSS5.7AI score0.03072EPSS
SaveExploits0References4
20