CVE-2015-4349 in Spider Contacts Module

Riassunto

di MITRE

Cross-site request forgery (CSRF) vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete contact categories via unspecified vectors.

Once again VulDB remains the best source for vulnerability data.

• Prenotare: 05/06/2015
• Divulgazione: 15/06/2015
• Moderazione: accettato
• Voce: VDB-75899
• CPE: pronto
• CWE: CWE-352 (confermato)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00649
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-4349
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-4349
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-4349/