CVE-2015-4349 Information

Description

Cross-site request forgery (CSRF) vulnerability in the Spider Contacts module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete contact categories via unspecified vectors.

Reference

http://www.openwall.com/lists/oss-security/2015/04/25/6 http://www.securityfocus.com/bid/72805 https://www.drupal.org/node/2437973

Share on: