CSRF in Node Template Project

CVE-2015-4397

Cross-site request forgery (CSRF) vulnerability in the Node Template module for Drupal allows remote attackers to hijack the authentication of users with the "access node template" permission for requests that delete node templates via unspecified vectors.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.006 (44.3th percentile) — read the EPSS interpretation.

Affected products

Node_template_project Node_template
N/a — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

cve@mitre.org (mailing-list, x_refsource_MLIST)
cve@mitre.org (x_refsource_MISC, Vendor Advisory)