CVE-2015-4383 Cross-site request forgery (CSRF) vulnerability in the Decisions module for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that remove individual voters vi...
MediumCVSS 6.8
EPSS 0.64%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in the Decisions module for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that remove individual voters via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| decisions project decisions | = 6.x-1.1 | No fix listed |
References
- [oss-security] 20150425 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-034 to SA-CONTRIB-2015-099) mailing-list
- 74344 vdb-entry
- www.drupal.org patch vendor-advisory