CVE-2010-4519

MEDIUM 6.8CVE-2010-4519 · Published 23/12/2010 · updated 16/06/2026

In short

CVE-2010-4519 is a MEDIUM (CVSS 6.8) vulnerability affecting views (earl miles).
Chance of exploitation in the next 30 days (EPSS): 0.60%, higher than 49.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
views earl_miles	`= 5.x-1.0= 5.x-1.1= 5.x-1.2= 5.x-1.3= 5.x-1.4= 5.x-1.4-2= 5.x-1.5= 5.x-1.6= 5.x-1.7= 5.x-1.x= 6.x-2.0= 6.x-2.1= 6.x-2.10= 6.x-2.2= 6.x-2.3= 6.x-2.4= 6.x-2.5= 6.x-2.6= 6.x-2.7= 6.x-2.8= 6.x-2.9= 6.x-2.x= 6.x-3.0= 6.x-3.x`	No fix yet

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the Views UI implementation in the Views module 5.x before 5.x-1.8 and 6.x before 6.x-2.11 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) enable all Views or (2) disable all Views.

References

drupal.org/node/829840 · Patch
openwall.com/lists/oss-security/2010/12/16/7 · Patch
openwall.com/lists/oss-security/2010/12/22/1 · Patch

More vulnerabilities in views

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free