Unscored CVE-2015-4349 EUVD-2015-4372GHSA-8c6w-p9fg-6fwf

Cross-site request forgery (CSRF) vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the authenticati…

Published Jun 15, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site request forgery (CSRF) vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete contact categories via unspecified vectors.

References

72805 vdb-entry
[oss-security] 20150425 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-034 to SA-CONTRIB-2015-099) mailing-list
https://www.drupal.org/node/2437973