CVE-2015-4349 in Spider Contacts Module信息

摘要

由 MITRE

Cross-site request forgery (CSRF) vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete contact categories via unspecified vectors.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2015-06-05

披露

2015-06-15

管理

已接受

条目

VDB-75899

CPE

准备好

CWE

CWE-352 (已确认)

CVSS

4.3 (VulDB)

EPSS

0.00649

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2015-4349
NVD	https://nvd.nist.gov/vuln/detail/CVE-2015-4349
CVE Details	https://www.cvedetails.com/cve/CVE-2015-4349/

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!