Description
Drupal Core is prone to a cross-site request forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application; other attacks are also possible. Drupal Core version 9.0.0 is vulnerable.
Remediation
Update to Drupal Core version 9.0.1 or latest
References
Related Vulnerabilities
Internet Information Services CVE-2009-4444 Vulnerability (CVE-2009-4444)
WordPress Plugin Easy Social Box/Page Cross-Site Scripting (4.1.2)
Oracle HTTP Server CVE-2013-5704 Vulnerability (CVE-2013-5704)
WordPress Plugin WebHotelier for WordPress Cross-Site Scripting (1.5)
Drupal Core 6.x Multiple Cross-Site Scripting Vulnerabilities (6.0)