CVE-2012-4478: CSRF
Published Nov 30, 2012
·Updated
Cross-site request forgery (CSRF) vulnerability in the Drag & Drop Gallery module 6.x for Drupal allows remote attackers to hijack the authentication of administrators.
Affected Software
2 affected components
David Alkire Drag \& Drop Gallery=6.x-1.5
Drupal Drupal
Remediation
Patch Available
Event History
Nov 30, 2012
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-4478?
CVE-2012-4478 is considered a medium severity vulnerability due to its potential for CSRF attacks targeting administrators.
2
How do I fix CVE-2012-4478?
To fix CVE-2012-4478, you should update the Drag & Drop Gallery module to version 6.x-1.6 or later.
3
Who is affected by CVE-2012-4478?
CVE-2012-4478 affects users of the Drag & Drop Gallery module version 6.x-1.5 for Drupal.
4
What type of vulnerability is CVE-2012-4478?
CVE-2012-4478 is a Cross-Site Request Forgery (CSRF) vulnerability.
5
Can CVE-2012-4478 be exploited remotely?
Yes, CVE-2012-4478 can be exploited remotely by attackers to hijack the authentication of administrators.