CVE-2015-3382

Drupal Node basket module contains CSRF vulnerabilities that can allow an attacker to hijack user sessions to add or remove nodes from a basket. Affected across versions prior to the fixes noted in the Drupal advisory; vectors are not detailed in the provided documents. Mitigation referenced: upd...

CVE-2015-3383

CVE-2015-3383 is a Drupal Node basket module open redirect vulnerability. The linked sources describe an open redirect issue (phishing risk) in the Node basket module and indicate that it affects all versions of the module. A remediation path is to uninstall or remove the Node basket module; othe...