CVE-2015-1568
09.02.2015, 17:59
Cross-site request forgery (CSRF) vulnerability in the GD Infinite Scroll module before 7.x-1.4 for Drupal allows remote attackers to hijack the authentication of users with the "edit gd infinite scroll settings" permission for requests that delete settings via unspecified vectors.
Vendor | Product | Version |
---|---|---|
studio.gd | gd_infinite_scroll | 𝑥 ≤ 7.x-1.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration