CVE-2012-1631 in Admin:hover

Resumen (Inglés)

Cross-site request forgery (CSRF) vulnerability in the Admin:hover module for Drupal allows remote attackers to hijack the authentication of administrators for requests that unpublish all nodes, and possibly other actions, via unspecified vectors.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

2012-03-12

Divulgación

2012-09-19

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
62372	Databasepublish Admin:hover falsificación de solicitudes en sitios cruzados	352	No probado	Unavailable	CVE-2012-1631

Fuentes

• MITRE
• NVD
• CVE Details