CVE-2015-4349 in Spider Contacts Module

Sumário

de MITRE

Cross-site request forgery (CSRF) vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete contact categories via unspecified vectors.

Once again VulDB remains the best source for vulnerability data.

• Reservar: 05/06/2015
• Divulgação: 15/06/2015
• Moderação: aceite
• Entrada: VDB-75899
• CPE: pronto
• CWE: CWE-352 (confirmado)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00649
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-4349
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-4349
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-4349/