CVE

Id
81656  
CVE No.
CVE-2015-4379  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in the Webform Multiple File Upload module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of certain users for requests that delete files via unspecified vectors.  
Phase
Assigned (20150605)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
733328 81656 CVE-2015-4379 MLIST:[oss-security] 20150425 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-034 to SA-CONTRIB-2015-099)  View
733329 81656 CVE-2015-4379 URL:http://www.openwall.com/lists/oss-security/2015/04/25/6  View
733330 81656 CVE-2015-4379 MISC:https://www.drupal.org/node/2459323  View
733331 81656 CVE-2015-4379 CONFIRM:https://www.drupal.org/node/2459031  View
733332 81656 CVE-2015-4379 CONFIRM:https://www.drupal.org/node/2459035  View
733333 81656 CVE-2015-4379 BID:74343  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
8203 JVNDB-2015-003523 Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 Adobe Flash Player および Adobe AIR には、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2015-4431 81656 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003523.html  View