Lucene search
+L

1 matches found

OSV
OSV
added 2013/11/30 9:35 p.m.14 views

MGASA-2013-0359 Updated drupal package fixes security vulnerabilities

Drupal's form API has built-in cross-site request forgery CSRF validation, and also allows any module to perform its own validation on the form. In certain common cases, form validation functions may execute unsafe operations CVE-2013-6385. Drupal core directly used the mtrand pseudorandom number...

6.8CVSS5.7AI score0.03072EPSS
SaveExploits0References4
Rows per page
Query Builder