Drupal Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-0272)

Description

Cross-site request forgery (CSRF) vulnerability in the aggregator module in Drupal 4.7.x before 4.7.11 and 5.x before 5.6 allows remote attackers to delete items from a feed as privileged users.

Remediation

References

CVE-2008-0272

Related Vulnerabilities

WordPress Plugin UpdraftPlus WordPress Backup Security Bypass (1.22.1)

WordPress 4.2.x Denial of Service Vulnerability (4.2 - 4.2.19)

phpMyFAQ Weak Password Requirements Vulnerability (CVE-2022-3754)

WordPress Plugin Business Hours Pro Arbitrary File Upload (5.5.0)

WordPress Plugin kk Star Ratings Security Bypass (2.3.1)

Severity

Medium

Classification

CVE-2008-0272 CWE-352