Cross-Site Request Forgery Vulnerability in Alfresco for Drupal
CVE-2015-3366

Currently unrated

Key Information:

Vendor: Alfresco
Status: Alfresco
Vendor: CVE Published:; 21 April 2015

What is CVE-2015-3366?

A cross-site request forgery (CSRF) vulnerability exists in the Alfresco module for Drupal, allowing remote attackers to perform unauthorized actions on behalf of legitimate users. This can lead to the deletion of Alfresco nodes without the users' consent. The exploit does not require any specific vectors, making it particularly dangerous for affected installations. Users should ensure their modules are updated to mitigate potential threats.

References

http://www.securityfocus.com/bid/74273

vdb-entryx_refsource_BID

https://www.drupal.org/node/2411523

x_refsource_MISC

https://www.drupal.org/node/2411501

x_refsource_CONFIRM

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 21, 2015
Vulnerability Reserved
Apr 21, 2015

CVE-2015-3366 Data

JSON