Unscored CVE-2012-2307 EUVD-2012-2300GHSA-frff-7jcw-x976

Cross-site request forgery (CSRF) vulnerability in the Addressbook module for Drupal 6.x-4.2 and earlier allows remote attackers to hijack …

Published Jul 25, 2012 · Updated Sep 16, 2024 · Assigned by redhat

Description

Cross-site request forgery (CSRF) vulnerability in the Addressbook module for Drupal 6.x-4.2 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

References

[oss-security] 20120502 Re: CVE Request for Drupal contributed modules mailing-list
[oss-security] 20120502 CVE Request for Drupal contributed modules mailing-list
http://drupal.org/node/1557868