CVE-2014-9015

Drupal 6.x before 6.34 and 7.x before 7.34 allows remote attackers to hijack sessions via a crafted request, as demonstrated by a crafted request to a server…

published November 24, 2014

CVSS
—
EPSS
2%
Percentile
84.2
In the wild
Unconfirmed
What it is

Drupal 6.x before 6.34 and 7.x before 7.34 allows remote attackers to hijack sessions via a crafted request, as demonstrated by a crafted request to a server that supports both HTTP and HTTPS sessions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02458 · 84.2th percentile
Published
2014-11-24T15:00Z
EPSS history
Timeline
  • 24 NOV 15:00Z
    Drupal 6.x before 6.34 and 7.x before 7.34 allows remote attackers to hijack sessions via a crafted request, as demonstrated by a crafted request to a server…
    cvelistv5