CVE-2012-2080: CSRF
Cross-site request forgery (CSRF) vulnerability in the Node Limit Number module before 6.x-1.2 for Drupal allows remote attackers to hijack the authentication of users with the administer node limitnumber permission for requests that delete limits.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2080?
The severity of CVE-2012-2080 is considered moderate as it allows unauthorized deletion of node limits by exploiting CSRF vulnerabilities.
How do I fix CVE-2012-2080?
To fix CVE-2012-2080, upgrade the Node Limit Number module to version 6.x-1.2 or higher, or 5.x-1.1 or higher.
Who is affected by CVE-2012-2080?
CVE-2012-2080 affects users of the Node Limit Number module for Drupal who have the administer node limitnumber permission.
What versions are impacted by CVE-2012-2080?
CVE-2012-2080 affects Node Limit Number versions before 6.x-1.2 and specific versions in the 5.x series.
What is the nature of the exploitation for CVE-2012-2080?
The exploitation of CVE-2012-2080 involves a cross-site request forgery (CSRF) attack that can hijack user authentication.