Skip to content
OpenAdvisories
Unscored CVE-2009-4517 EUVD-2009-4483GHSA-93v5-m8h2-php8

Cross-site request forgery (CSRF) vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0, a module for Drupal, allows remote attack…

Published Dec 31, 2009 · Updated Sep 16, 2024 · Assigned by mitre

Category: Web / CMS

Description

Cross-site request forgery (CSRF) vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to hijack the authentication of arbitrary users for requests that access unpublished content.

References