CVE-2009-3922

Multiple cross-site request forgery (CSRF) vulnerabilities in the User Protect module 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for Drupal, allow…

published November 9, 2009

CVSS
—
EPSS
1%
Percentile
53.4
In the wild
Unconfirmed
What it is

Multiple cross-site request forgery (CSRF) vulnerabilities in the User Protect module 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for Drupal, allow remote attackers to hijack the authentication of administrators for requests that (1) delete the editing protection of a user or (2) delete a certain type of administrative-bypass rule.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00720 · 53.4th percentile
Published
2009-11-09T17:00Z
EPSS history
Timeline
  • 09 NOV 17:00Z
    Multiple cross-site request forgery (CSRF) vulnerabilities in the User Protect module 5.x before 5.x-1.4 and 6.x before 6.x-1.3, a module for Drupal, allow…
    cvelistv5