CSRF in Watchdog Aggregator Project
CVE-2015-4355
Cross-site request forgery (CSRF) vulnerability in the Watchdog Aggregator module for Drupal allows remote attackers to hijack the authentication of administrators for requests that enable or disable monitoring sites via unspecified vectors.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.006 (47.4th percentile) — read the EPSS interpretation.
Affected products
- Watchdog_aggregator_project Watchdog_aggregator
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_MLIST)
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)