Unscored CVE-2012-4486 EUVD-2012-4415GHSA-fqj8-wmfw-c4m4

Cross-site request forgery (CSRF) vulnerability in the Subuser module before 6.x-1.8 for Drupal allows remote attackers to hijack the authe…

Published Nov 2, 2012 · Updated Sep 17, 2024 · Assigned by redhat

Description

Cross-site request forgery (CSRF) vulnerability in the Subuser module before 6.x-1.8 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that switch the user to a subuser via unspecified vectors.

References

[oss-security] 20121004 CVE Request for Drupal Contributed Modules mailing-list
http://drupal.org/node/1700584
http://drupal.org/node/1700550
[oss-security] 20121007 Re: CVE Request for Drupal Contributed Modules mailing-list