CVE-2015-1568

EUVD-2015-1700
Cross-site request forgery (CSRF) vulnerability in the GD Infinite Scroll module before 7.x-1.4 for Drupal allows remote attackers to hijack the authentication of users with the "edit gd infinite scroll settings" permission for requests that delete settings via unspecified vectors.
CSRF
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 31%
Affected Products (NVD)
VendorProductVersion
studio.gdgd_infinite_scroll
𝑥
≤ 7.x-1.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/100628
https://www.drupal.org/node/2415219
https://www.drupal.org/node/2415885
https://exchange.xforce.ibmcloud.com/vulnerabilities/100628
https://www.drupal.org/node/2415219
https://www.drupal.org/node/2415885