Unscored CVE-2012-2057 EUVD-2012-2063GHSA-wp7g-r4mw-j38q

Cross-site request forgery (CSRF) vulnerability in the Ubercart Bulk Stock Updater module for Drupal allows remote attackers to hijack the …

Published Sep 17, 2012 · Updated Aug 6, 2024 · Assigned by redhat

Description

Cross-site request forgery (CSRF) vulnerability in the Ubercart Bulk Stock Updater module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors related to formAPI.

References

http://drupal.org/node/1482126
ubercart-drupal-csrf(74054) vdb-entry
52502 vdb-entry
[oss-security] 20120406 CVE's for Drupal Contrib 2012 001 through 057 (67 new CVE assignments) mailing-list