Description

Cross-site request forgery (CSRF) vulnerability in the aggregator module in Drupal 4.7.x before 4.7.11 and 5.x before 5.6 allows remote attackers to delete items from a feed as privileged users.

Remediation

References

CVE-2008-0272

Related Vulnerabilities

Roundcube Unspesificed Vulnerability (CVE-2019-15237)

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3427)

MySQL CVE-2016-0662 Vulnerability (CVE-2016-0662)

WordPress Plugin CMS Commander Client PHP Object Injection (2.21)

Serendipity Remote Code Execution (CVE-2020-10964)

Severity

Medium

Classification

CVE-2008-0272 CWE-352

Tags

Missing Update Known Vulnerabilities