Lucene search
+L

1 matches found

Drupal
Drupal
added 2015/02/25 12:00 a.m.25 views

SA-CONTRIB-2015-060 - Custom Sitemap - Cross Site Request Forgery (CSRF) - Unsupported

The Custom Sitemap module enables you to add custom sitemaps to a site. The module doesn't sufficiently protect some URLs against CSRF. A malicious user could trick an administrator into deleting sitemaps by getting their browser to make a request to a specially-crafted URL. CVE identifiers issue...

5.8CVSS6.3AI score0.00649EPSS
SaveExploits0References8
Rows per page
Query Builder