CVE-2013-0320
27.03.2013, 21:55
Cross-site request forgery (CSRF) vulnerability in the Taxonomy Manager (taxonomy_manager) module 6.x-2.x before 6.x-2.2 and 7.x-1.x before 7.x-1.0-rc1 for Drupal allows remote attackers to hijack the authentication of users with 'administer taxonomy' permissions via unspecified vectors.
CSRF
| Vendor | Product | Version |
|---|---|---|
| mattias_hutterer | taxonomy_manager | 6.x-2.0 |
| mattias_hutterer | taxonomy_manager | 6.x-2.1 |
| mattias_hutterer | taxonomy_manager | 6.x-2.x |
| mattias_hutterer | taxonomy_manager | 7.x-1.0 |
| mattias_hutterer | taxonomy_manager | 7.x-1.0 |
| mattias_hutterer | taxonomy_manager | 7.x-1.0 |
| mattias_hutterer | taxonomy_manager | 7.x-1.0 |
| mattias_hutterer | taxonomy_manager | 7.x-1.0 |
| mattias_hutterer | taxonomy_manager | 7.x-1.0 |
| mattias_hutterer | taxonomy_manager | 7.x-1.0 |
| mattias_hutterer | taxonomy_manager | 7.x-1.x |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References