Drupal GD Infinite Scroll Module CVE-2015-1568 Cross Site Request Forgery Vulnerability
BID:73362
Info
Drupal GD Infinite Scroll Module CVE-2015-1568 Cross Site Request Forgery Vulnerability
| Bugtraq ID: | 73362 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-1568 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 28 2015 12:00AM |
| Updated: | Jan 28 2015 12:00AM |
| Credit: | Pere Orga |
| Vulnerable: |
Drupal GD Infinite Scroll 7.x-1.3 |
| Not Vulnerable: |
Drupal GD Infinite Scroll 7.x-1.4 |
Discussion
Drupal GD Infinite Scroll Module CVE-2015-1568 Cross Site Request Forgery Vulnerability
The GD Infinite Scroll for Drupal is prone to a cross-site request-forgery vulnerability.
An attacker can exploit this issue to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible.
Versions prior to GD Infinite Scroll 7.x-1.4 are vulnerable.
The GD Infinite Scroll for Drupal is prone to a cross-site request-forgery vulnerability.
An attacker can exploit this issue to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible.
Versions prior to GD Infinite Scroll 7.x-1.4 are vulnerable.
Solution / Fix
Drupal GD Infinite Scroll Module CVE-2015-1568 Cross Site Request Forgery Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.