CVE-2015-7233

2022-10-0316:15:55

mitre

www.cve.org

cve-2015-7233

csrf

osf module

drupal

authentication hijacking

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

35.5%

JSON

Cross-site request forgery (CSRF) vulnerability in the OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Import module is enabled, allows remote attackers to hijack the authentication of administrators for requests that create new OSF datasets via unspecified vectors.

References

www.drupal.org/node/2537120

www.drupal.org/node/2537860