Unscored CVE-2015-4353 EUVD-2015-4376GHSA-4rg9-8gm7-m9pq

Cross-site request forgery (CSRF) vulnerability in the Custom Sitemap module for Drupal allows remote attackers to hijack the authenticatio…

Published Jun 15, 2015 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site request forgery (CSRF) vulnerability in the Custom Sitemap module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete sitemaps via unspecified vectors.

References

72811 vdb-entry
https://www.drupal.org/node/2437985
[oss-security] 20150425 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-034 to SA-CONTRIB-2015-099) mailing-list