CVE-2015-4362 in Tracking Code Module

Riassunto

di MITRE

Cross-site request forgery (CSRF) vulnerability in tracking_code.admin.inc in the Tracking Code module 7.x-1.x before 7.x-1.6 for Drupal allows remote attackers to hijack the authentication of administrators for requests that disable tracking codes via unspecified vectors.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 05/06/2015
• Divulgazione: 15/06/2015
• Moderazione: accettato
• Voce: VDB-75912
• CPE: pronto
• CWE: CWE-352 (confermato)
• CVSS: 6.8 (NVD)
• EPSS: 0.01055
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-4362
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-4362
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-4362/