Skip to content
OpenAdvisories
Unscored CVE-2012-5542 EUVD-2012-5434GHSA-p6h6-f78v-7wj8

Cross-site request forgery (CSRF) vulnerability in the Commerce Extra Panes module 7.x-1.x before 7.x-1.1 in Drupal allows remote attackers…

Published Dec 3, 2012 · Updated Aug 6, 2024 · Assigned by redhat

Description

Cross-site request forgery (CSRF) vulnerability in the Commerce Extra Panes module 7.x-1.x before 7.x-1.1 in Drupal allows remote attackers to hijack the authentication of administrators for requests that enable or disable a Commerce extra panes pane via unspecified vectors related to "the link to reorder items."

References