CSRF in Decisions Project
CVE-2015-4383
Cross-site request forgery (CSRF) vulnerability in the Decisions module for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that remove individual voters via unspecified vectors.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.006 (47.4th percentile) — read the EPSS interpretation.
Affected products
- Decisions_project Decisions — versions 6.x-1.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_MLIST)
- cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)