VULNERABILITY INTELLIGENCE
CVE-2012-2061
CVSS score6.8 MEDIUM
EPSS probability0.75%
CISA KEVNot currently listed
Published2012-09-17
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Cross-site request forgery (CSRF) vulnerability in the Admin tools module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors involving "not checking tokens."
Weakness classification
- CWE-352: Cross-Site Request Forgery (CSRF)