Lucene search
HistoryJun 21, 2012 - 3:55 p.m.
CVE-2012-2716
csrf
vulnerability
comment moderation module
drupal
authentication
admins
comment publishing
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
82.6%
Cross-site request forgery (CSRF) vulnerability in the Comment Moderation module 6.x-1.x before 6.x-1.1 for Drupal allows remote attackers to hijack the authentication of administrators for requests that publish comments.
Affected configurations
Node
david_stosikcomment_moderationMatch6.x-1.0
ORdavid_stosikcomment_moderationMatch6.x-1.x-dev
drupaldrupalMatch-
Related
drupal
drupal
SA-CONTRIB-2012-087 - Comment Moderation - Cross Site Request Forgery
2012-05-30 00:00:00
cvelist
cvelist
CVE-2012-2716
2012-06-21 15:00:00
prion
prion
Cross site request forgery (csrf)
2012-06-21 15:55:00
nvd
nvd
CVE-2012-2716
2012-06-21 15:55:13
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.009 Low
EPSS
Percentile
82.6%
Related for CVE-2012-2716