CVE

Id
30109  
CVE No.
CVE-2007-6752  
Status
Candidate  
Description
** DISPUTED ** Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that end a session via the user/logout URI. NOTE: the vendor disputes the significance of this issue, by considering the "security benefit against platform complexity and performance impact" and concluding that a change to the logout behavior is not planned because "for most sites it is not worth the trade-off."  
Phase
Assigned (20120327)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
318452 30109 CVE-2007-6752 EXPLOIT-DB:18564  View
318453 30109 CVE-2007-6752 URL:http://www.exploit-db.com/exploits/18564/  View
318454 30109 CVE-2007-6752 MISC:http://drupal.org/node/144538  View
318455 30109 CVE-2007-6752 MISC:http://groups.drupal.org/node/216314  View
318456 30109 CVE-2007-6752 MISC:http://ivanobinetti.blogspot.it/2012/03/drupal-cms-712-latest-stable-release.html  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27706 JVNDB-2012-003413 FreeBSD および NetBSD 向けの libc の jemalloc におけるメモリ関連の脆弱性 FreeBSD および NetBSD 向けの libc の jemalloc 内の libc/stdlib/malloc.c の ipalloc 関数は、メモリの割り当てを適切に行わないため、バッファオーバーフローのようなメモリ関連の攻撃を実行される脆弱性が存在します。 CVE-2007-6754 30109 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003413.html  View