CVE-2012-1631

EUVD-2012-1641
Cross-site request forgery (CSRF) vulnerability in the Admin:hover module for Drupal allows remote attackers to hijack the authentication of administrators for requests that unpublish all nodes, and possibly other actions, via unspecified vectors.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 37%
Common Weakness Enumeration
References
http://drupal.org/node/1401644
http://drupal.org/node/1407206
http://www.openwall.com/lists/oss-security/2012/04/07/1
http://www.securityfocus.com/bid/51388
https://exchange.xforce.ibmcloud.com/vulnerabilities/72386
http://drupal.org/node/1401644
http://drupal.org/node/1407206
http://www.openwall.com/lists/oss-security/2012/04/07/1
http://www.securityfocus.com/bid/51388
https://exchange.xforce.ibmcloud.com/vulnerabilities/72386