Description

Cross-site request forgery (CSRF) vulnerability in the aggregator module in Drupal 4.7.x before 4.7.11 and 5.x before 5.6 allows remote attackers to delete items from a feed as privileged users.

Remediation

References

CVE-2008-0272

Related Vulnerabilities

WordPress Plugin DW Mega Menu Cross-Site Request Forgery (1.0.1)

WordPress Plugin Complianz-GDPR/CCPA Cookie Consent Cross-Site Scripting (5.5.2)

WordPress Plugin Forums 'url' Parameter Arbitrary File Disclosure (1.4.3)

PHP Resource Management Errors Vulnerability (CVE-2011-1148)

Drupal Core 8.7.x Cross-Site Scripting (8.7.0 - 8.7.13)

Severity

Medium

Classification

CVE-2008-0272 CWE-352

Tags

Missing Update Known Vulnerabilities