CVE-2012-0826: CSRF
Cross-site request forgery (CSRF) vulnerability in the Aggregator module in Drupal 6.x before 6.23 and 7.x before 7.11 allows remote attackers to hijack the authentication of unspecified victims for requests that update feeds and possibly cause a denial of service (loss of updates due to rate limit) via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0826?
CVE-2012-0826 is considered a moderate severity vulnerability due to its potential for causing denial of service and the hijacking of authentication.
How do I fix CVE-2012-0826?
To fix CVE-2012-0826, you should upgrade to Drupal versions 6.23 or 7.11 and above, which include the necessary security patches.
What type of vulnerability is CVE-2012-0826?
CVE-2012-0826 is categorized as a cross-site request forgery (CSRF) vulnerability affecting the Aggregator module in specific Drupal versions.
Who is affected by CVE-2012-0826?
Users operating on Drupal versions 6.x before 6.23 and 7.x before 7.11 are vulnerable to CVE-2012-0826.
What are the potential impacts of CVE-2012-0826?
The potential impacts of CVE-2012-0826 include unauthorized updates to feeds and possible denial of service due to loss of updates from rate limiting.