NVD

Id
43922  
Name
CVE-2012-2069  
Description
Cross-site request forgery (CSRF) vulnerability in the Wishlist module 6.x-2.x before 6.x-2.6 and 7.x-2.x before 7.x-2.6 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site scripting (XSS) sequences via the (1) wl_reveal or (2) q parameters.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-09-06  
Modified Date
2012-10-30  
Seq
2012-2069  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
220582 43922 CVE-2012-2069 http://drupal.org/node/1483634  View
220583 43922 CVE-2012-2069 http://drupal.org/node/1483636  View
220584 43922 CVE-2012-2069 http://drupal.org/node/1492624  View
220585 43922 CVE-2012-2069 http://drupalcode.org/project/wishlist.git/commit/6660c33  View
220586 43922 CVE-2012-2069 http://drupalcode.org/project/wishlist.git/commit/73aaf98  View
220587 43922 CVE-2012-2069 http://www.madirish.net/content/drupal-wishlist-6x-24-xss-vulnerability  View
220588 43922 CVE-2012-2069 [oss-security] 20120406 CVE"s for Drupal Contrib 2012 001 through 057 (67 new CVE assignments)  View
220589 43922 CVE-2012-2069 52660  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28405 JVNDB-2012-004112 Drupal 用 Wishlist モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 Drupal 用 Wishlist モジュールには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2012-2069 55307 CVE-2012-2069 43922 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004112.html 2012-03-21 2012-09-07 View