Unscored CVE-2012-4478 EUVD-2012-4407GHSA-98fr-cg7h-f734

Cross-site request forgery (CSRF) vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to hijack the auth…

Published Nov 30, 2012 · Updated Sep 16, 2024 · Assigned by redhat

Description

Cross-site request forgery (CSRF) vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to hijack the authentication of administrators.

References

[oss-security] 20121003 Re: CVE Request for Drupal Contributed Modules mailing-list
http://drupal.org/node/1679442