CVE-2015-4379: CSRF
Cross-site request forgery (CSRF) vulnerability in the Webform Multiple File Upload module 6.x-1.x before 6.x-1.3 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of certain users for requests that delete files via unspecified vectors.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4379?
CVE-2015-4379 is a medium severity cross-site request forgery (CSRF) vulnerability that can allow unauthorized actions on behalf of users.
How do I fix CVE-2015-4379?
To resolve CVE-2015-4379, upgrade to Webform Multiple File Upload module version 6.x-1.3 or 7.x-1.3 or later.
Who is affected by CVE-2015-4379?
CVE-2015-4379 affects users of the Webform Multiple File Upload module versions 6.x-1.0 to 6.x-1.2 and 7.x-1.2 and prior.
What does CVE-2015-4379 allow an attacker to do?
CVE-2015-4379 allows attackers to hijack the authentication of users for unauthorized requests to delete files.
How can I determine if my system is vulnerable to CVE-2015-4379?
Check your Webform Multiple File Upload module version and compare it against the affected versions listed in CVE-2015-4379.