Unscored CVE-2015-3343 EUVD-2015-3388GHSA-v8xc-mj82-rc3f

Cross-site request forgery (CSRF) vulnerability in the OPAC module before 7.x-2.3 for Drupal allows remote attackers to hijack the authenti…

Published Apr 21, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site request forgery (CSRF) vulnerability in the OPAC module before 7.x-2.3 for Drupal allows remote attackers to hijack the authentication of unspecified victims for requests that remove a mapping via unknown vectors.

References

72630 vdb-entry
https://www.drupal.org/node/2403313
https://www.drupal.org/node/2402393
[oss-security] 20150129 Re: CVEs for Drupal contributed modules - January 2015 mailing-list