CVE-2012-2096

The Fivestar module 6.x-1.x before 6.x-1.20 for Drupal does not properly validate voting data, which allows remote attackers to manipulate voting averages via…

published August 14, 2012

CVSS
—
EPSS
2%
Percentile
78.7
In the wild
Unconfirmed
What it is

The Fivestar module 6.x-1.x before 6.x-1.20 for Drupal does not properly validate voting data, which allows remote attackers to manipulate voting averages via a negative value in the vote parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01840 · 78.7th percentile
Published
2012-08-14T21:00Z
EPSS history
Timeline
  • 14 AUG 21:00Z
    The Fivestar module 6.x-1.x before 6.x-1.20 for Drupal does not properly validate voting data, which allows remote attackers to manipulate voting averages via…
    cvelistv5