Description

Cross-site request forgery (CSRF) vulnerability in the Aggregator module in Drupal 6.x before 6.23 and 7.x before 7.11 allows remote attackers to hijack the authentication of unspecified victims for requests that update feeds and possibly cause a denial of service (loss of updates due to rate limit) via unspecified vectors.

Remediation

References

CVE-2012-0826

Related Vulnerabilities

WordPress Plugin Easy WP SMTP PHP Object Injection (1.3.9)

TYPO3 Insertion of Sensitive Information into Log File Vulnerability (CVE-2021-32767)

WordPress Plugin WP Job Manager Unspecified Vulnerability (1.32.2)

WordPress Plugin Backup, Restore and Migrate WordPress Sites With the XCloner Cross-Site Scripting (3.1.4)

WordPress Plugin Checklist Cross-Site Scripting (1.1.5)

Severity

Medium

Classification

CVE-2012-0826 CWE-352

Tags

Missing Update Known Vulnerabilities