CSRF in E-Publish Project
CVE-2008-1981
Cross-site request forgery (CSRF) vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0 beta1, a Drupal module, allows remote attackers to perform unauthorized actions as other users via unspecified vectors.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.007 (50.1th percentile) — read the EPSS interpretation.
Affected products
- E-publish_project E-publish — versions 5.x-1.0, 5.x-1.x, 6.x-1.x
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (Permissions Required, vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Third Party Advisory)
- cve@mitre.org (VDB Entry, vdb-entry, Tool Signature, x_refsource_XF)