Unscored CVE-2015-3374 EUVD-2015-3419GHSA-5j9v-cgrh-qpc9

Multiple cross-site request forgery (CSRF) vulnerabilities in the Corner module for Drupal allow remote attackers to hijack the authenticat…

Published Apr 21, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the Corner module for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) enable or (2) disable corners via unspecified vectors.

References

https://www.drupal.org/node/2411741
74275 vdb-entry
[oss-security] 20150129 Re: CVEs for Drupal contributed modules - January 2015 mailing-list