Lucene search
HistorySep 17, 2015 - 4:59 p.m.
CVE-2015-7233
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.001
Percentile
35.5%
Cross-site request forgery (CSRF) vulnerability in the OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Import module is enabled, allows remote attackers to hijack the authentication of administrators for requests that create new OSF datasets via unspecified vectors.
Affected configurations
Node
structured_dynamicsopen_semantic_frameworkMatch7.x-3.0drupal
ORstructured_dynamicsopen_semantic_frameworkMatch7.x-3.xdevdrupal
Related
cvelist
cvelist
CVE-2015-7233
2022-10-03 16:15:55
cve
cve
CVE-2015-7233
2022-10-03 16:15:55
prion
prion
Cross site request forgery (csrf)
2015-09-17 16:59:00
drupal
drupal
OSF for Drupal - Critical - Multiple vulnerabilities - SA-CONTRIB-2015-134
2015-07-22 00:00:00
CVSS2
5.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.001
Percentile
35.5%
Related for NVD:CVE-2015-7233