CVE-2015-3374

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the Corner module for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) enable or (2) disable corners via unspecified vectors.

References

https://www.drupal.org/node/2411741

http://www.securityfocus.com/bid/74275

http://www.openwall.com/lists/oss-security/2015/01/29/6

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS