CSRF in Drupal

CVE-2012-2341

Cross-site request forgery (CSRF) vulnerability in the Take Control module 6.x-2.x before 6.x-2.2 for Drupal allows remote attackers to hijack the authentication of unspecified users for Ajax requests that manipulate files.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.009 (55.8th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References