CVE-2009-3656

2009-10-0914:18:00

mitre

www.cve.org

AI Score

7.2

Confidence

Low

EPSS

0.002

Percentile

52.5%

JSON

Cross-site request forgery (CSRF) vulnerability in Shared Sign-On 5.x and 6.x, a module for Drupal, allows remote attackers to hijack the authentication of arbitrary users via unknown vectors.

References

drupal.org/node/592488

www.securityfocus.com/bid/36563

exchange.xforce.ibmcloud.com/vulnerabilities/53559