Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-0826
6.8
MEDIUMCVSS v2
Published
October 28, 2013
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
Cross-site request forgery (CSRF) vulnerability in the Aggregator module in Drupal 6.x before 6.23 and 7.x before 7.11 allows remote attackers to hijack the authentication of unspecified victims for requests that update feeds and possibly cause a denial of service (loss of updates due to rate limit) via unspecified vectors.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.= 6.0, = 6.2, = 6.14, = 6.13, = 6.18, = 6.12, = 6.6, = 6.7, = 6.11, = 6.17, = 6.8, = 6.15, = 6.21, = 6.22, = 6.4, = 6.5, = 6.1, = 6.10, = 6.19, = 6.20, = 6.3, = 6.16, = 6.9, = 7.0, = 7.3, = 7.5, = 7.6, = 7.2, = 7.9, = 7.x-dev, = 7.1, = 7.7, = 7.8, = 7.4, = 7.10NVD
drupal
NPMImplementation of parts of Drupal’s user/access control API.
NPMImplementation of parts of Drupal’s user/access control API.= 6.0, = 6.2, = 6.14, = 6.13, = 6.18, = 6.12, = 6.6, = 6.7, = 6.11, = 6.17, = 6.8, = 6.15, = 6.21, = 6.22, = 6.4, = 6.5, = 6.1, = 6.10, = 6.19, = 6.20, = 6.3, = 6.16, = 6.9, = 7.0, = 7.3, = 7.5, = 7.6, = 7.2, = 7.9, = 7.x-dev, = 7.1, = 7.7, = 7.8, = 7.4, = 7.10NVD