NVD

Id
36667  
Name
CVE-2013-0320  
Description
Cross-site request forgery (CSRF) vulnerability in the Taxonomy Manager (taxonomy_manager) module 6.x-2.x before 6.x-2.2 and 7.x-1.x before 7.x-1.0-rc1 for Drupal allows remote attackers to hijack the authentication of users with "administer taxonomy" permissions via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-03-27  
Modified Date
2013-03-28  
Seq
2013-0320  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
187383 36667 CVE-2013-0320 http://drupal.org/node/1922168  View
187384 36667 CVE-2013-0320 http://drupal.org/node/1922170  View
187385 36667 CVE-2013-0320 http://drupal.org/node/1922410  View
187386 36667 CVE-2013-0320 http://drupalcode.org/project/taxonomy_manager.git/commitdiff/2d05801  View
187387 36667 CVE-2013-0320 http://drupalcode.org/project/taxonomy_manager.git/commitdiff/595f1b3  View
187388 36667 CVE-2013-0320 [oss-security] 20130220 Re: CVE request for Drupal Core and contributed modules  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20479 JVNDB-2013-002054 Drupal 用 Taxonomy Manager モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 Drupal 用 Taxonomy Manager (taxonomy_manager) モジュールには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2013-0320 60262 CVE-2013-0320 36667 5.1 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002054.html 2013-02-20 2013-04-01 View