CVE-2015-4379 in Webform Multiple File Upload Module
Summary
Cross-site request forgery (CSRF) vulnerability in the Webform Multiple File Upload module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of certain users for requests that delete files via unspecified vectors.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
06/05/2015
Disclosure
06/15/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 75928 | Webform Multiple File Upload Module cross-site request forgery | 352 | Not defined | Official fix | CVE-2015-4379 |