NVD

Id
45351  
Name
CVE-2012-3799  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the Maestro module 7.x-1.x before 7.x-1.2 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) change workflows or (2) insert cross-site scripting (XSS) sequences.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-06-26  
Modified Date
2012-06-27  
Seq
2012-3799  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
227725 45351 CVE-2012-3799 http://drupal.org/node/1617952  View
227726 45351 CVE-2012-3799 http://drupal.org/node/1619830  View
227727 45351 CVE-2012-3799 http://drupalcode.org/project/maestro.git/commitdiff/c499971  View
227728 45351 CVE-2012-3799 [oss-security] 20120613 Re: CVE Request for Drupal contributed modules  View
227729 45351 CVE-2012-3799 53836  View
227730 45351 CVE-2012-3799 maestro-unspecified-csrf(76146)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27213 JVNDB-2012-002920 Drupal 用 Maestro モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 Drupal 用 Maestro モジュールには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2012-3799 57037 CVE-2012-3799 45351 5.1 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002920.html 2012-06-06 2012-06-29 View