Description
Cross-site request forgery (CSRF) vulnerability in Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allows remote attackers to perform unauthorized actions as an arbitrary user via unspecified vectors.
References
- 20061019 [DRUPAL-SA-2006-025] Drupal 4.6.10 / 4.7.4 fixes CRF issue mailing-list
- 1765 third-party-advisory
- OpenPKG-SA-2006.025-drupal vendor-advisory
- drupal-unspecified-csrf(29679) vdb-entry
- 22486 third-party-advisory
- http://drupal.org/node/88828
- ADV-2006-4120 vdb-entry