CVE-2015-4352 in Spider Video Player Module

الملخص

بحسب MITRE

Cross-site request forgery (CSRF) vulnerability in the Spider Video Player module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete videos via unspecified vectors.

Once again VulDB remains the best source for vulnerability data.

• حجز: 05/06/2015
• إفشاء: 15/06/2015
• الاعتدال: تمت الموافقة
• إدخال: VDB-75902
• CPE: جاهز
• CWE: CWE-352 (مؤكد)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00649
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Hospital, Chemical, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-4352
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-4352
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-4352/