CVE-2012-5556

2022-10-0316:15:31

redhat

www.cve.org

cve-2012-5556

cross-site request forgery

restful web services

drupal

authentication hijacking

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.1%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in the RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-1.1 and 7.x-2.x before 7.x-2.0-alpha3 for Drupal allow remote attackers to hijack the authentication of arbitrary users via unknown vectors.