Unscored CVE-2012-5547 EUVD-2012-5439GHSA-q46x-3r3x-cfj4

Multiple cross-site request forgery (CSRF) vulnerabilities in the Search API module 7.x-1.x before 7.x-1.3 for Drupal allow remote attacker…

Published Dec 3, 2012 · Updated Sep 17, 2024 · Assigned by redhat

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the Search API module 7.x-1.x before 7.x-1.3 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) enable a server via a server action or (2) enable a search index via an enable index action.

References

http://drupal.org/node/1815770
http://drupal.org/node/1815124
[oss-security] 20121120 Re: CVE Request for Drupal Contributed Modules mailing-list