Unscored CVE-2012-1636 EUVD-2012-1646GHSA-853m-5x9w-frwp

Cross-site request forgery (CSRF) vulnerability in the stickynote module before 7.x-1.1 for Drupal allows remote attackers to hijack the au…

Published Oct 1, 2012 · Updated Sep 16, 2024 · Assigned by redhat

Description

Cross-site request forgery (CSRF) vulnerability in the stickynote module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of users for requests that delete stickynotes via unspecified vectors.

References

47650 third-party-advisory
http://drupal.org/node/1408556
http://drupal.org/node/1409422
[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments) mailing-list
http://drupalcode.org/project/stickynote.git/commit/9a7b535