Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2013-5937
6.8
MEDIUMCVSS v2
Published
September 25, 2013
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Cross-site request forgery (CSRF) vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete database information via vectors involving the Drupal Form API.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.all versionsNVD
NPM