CSRF Vulnerability in Drupal Form API by Drupal Association
CVE-2015-6660
Currently unrated
What is CVE-2015-6660?
The Form API in Drupal versions prior to 6.37 and 7.39 lacks proper validation of form tokens, which exposes the system to CSRF attacks. This vulnerability could allow attackers to upload files within the context of another user’s account by exploiting weaknesses in file upload value callbacks. Consequently, unauthorized actions may be executed, compromising the integrity and security of user accounts.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.