CVE-2015-4397

Summary

Cross-site request forgery (CSRF) vulnerability in the Node Template module for Drupal allows remote attackers to hijack the authentication of users with the "access node template" permission for requests that delete node templates via unspecified vectors.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://www.openwall.com/lists/oss-security/2015/04/25/6
• https://www.drupal.org/node/2475955

References

• http://www.openwall.com/lists/oss-security/2015/04/25/6
• https://www.drupal.org/node/2475955

• ←Previous
• Next→