Description
Cross-site request forgery (CSRF) vulnerability in the Aggregator module in Drupal 6.x before 6.23 and 7.x before 7.11 allows remote attackers to hijack the authentication of unspecified victims for requests that update feeds and possibly cause a denial of service (loss of updates due to rate limit) via unspecified vectors.
Remediation
References
Related Vulnerabilities
RubyGems Improper Verification of Cryptographic Signature Vulnerability (CVE-2018-1000076)
WordPress Plugin Header Enhancement Security Bypass (1.4.3)
WordPress Plugin WPGraphQL Denial of Service (1.3.5)
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-0346)
WordPress Plugin WordPress Download Manager Arbitrary File Upload (2.8.97)