Description
Cross-site request forgery (CSRF) vulnerability in the Password Policy module before 6.x-1.4 and 7.x-1.0 beta3 for Drupal allows remote attackers to hijack the authentication of administrative users for requests that unblock a user.
Unscored
CVE-2012-1633
EUVD-2012-1643GHSA-v6gx-89ww-chv2
Cross-site request forgery (CSRF) vulnerability in the Password Policy module before 6.x-1.4 and 7.x-1.0 beta3 for Drupal allows remote att…
Published Sep 20, 2012 · Updated Aug 6, 2024 · Assigned by redhat