CVE-2015-3343

The Drupal OPAC module (7.x-2.x) is vulnerable to a Cross-Site Request Forgery (CSRF) that allows remote attackers to hijack user authentication and remove mappings, because the module does not require confirmation when removing a mapping. Affected versions are OPAC 7.x-2.x prior to 7.x-2.3. The ...