CSRF in Web-Dorado Spider Video Player
CVE-2015-4352
Cross-site request forgery (CSRF) vulnerability in the Spider Video Player module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete videos via unspecified vectors.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.006 (47.4th percentile) — read the EPSS interpretation.
Affected products
- Web-dorado Web-dorado_spider_video_player
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_MLIST)
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)