Beveiligingsadvies

CVE-2015-5508

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2015-08-18 17:00:00
Laatst bijgewerkt 2024-08-06 06:50:02
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Cross-site request forgery (CSRF) vulnerability in the XC NCIP Provider module in the eXtensible Catalog (XC) Drupal Toolkit allows remote attackers to hijack the authentication of users with the "administer ncip providers" permission for requests that alter NCIP providers via a crafted request.