VULNERABILITY INTELLIGENCE

CVE-2015-4396

CVSS score5.1 MEDIUM
EPSS probability0.63%
CISA KEVNot currently listed
Published2015-06-15
Last modified2026-06-17
CVSS vectorAV:N/AC:H/Au:N/C:P/I:P/A:P

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the Keyword Research module 6.x-1.x before 6.x-1.2 for Drupal allow remote attackers to hijack the authentication of users with the "kwresearch admin site keywords" permission for requests that (1) create, (2) delete, or (3) set priorities to keywords via unspecified vectors.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)

Primary references