VULNERABILITY INTELLIGENCE

CVE-2012-0826

CVSS score6.8 MEDIUM
EPSS probability0.92%
CISA KEVNot currently listed
Published2013-10-28
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Cross-site request forgery (CSRF) vulnerability in the Aggregator module in Drupal 6.x before 6.23 and 7.x before 7.11 allows remote attackers to hijack the authentication of unspecified victims for requests that update feeds and possibly cause a denial of service (loss of updates due to rate limit) via unspecified vectors.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)

Primary references