CVE-2015-4353 Cross-site request forgery (CSRF) vulnerability in the Custom Sitemap module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete sitemaps via uns...
MediumCVSS 5.8
EPSS 0.64%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in the Custom Sitemap module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete sitemaps via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| osscube custom sitemap | All versions | No fix listed |
References
- [oss-security] 20150425 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-034 to SA-CONTRIB-2015-099) mailing-list
- 72811 vdb-entry
- www.drupal.org vendor-advisory