CVE-2015-4349 Cross-site request forgery (CSRF) vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete contact categor...
MediumCVSS 5.8
EPSS 0.64%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete contact categories via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| spider contacts project spider contacts | All versions | No fix listed |
References
- [oss-security] 20150425 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-034 to SA-CONTRIB-2015-099) mailing-list
- 72805 vdb-entry
- www.drupal.org vendor-advisory