CVE-2008-6835

概要

参考情報

• drupal.org/node/280592 · Patch
• drupal.org/node/280593 · Patch
• osvdb.org/46938
• secunia.com/advisories/31027 · Vendor Advisory
• securityfocus.com/bid/30165

openid のその他の脆弱性

• CVE-2010-3686中 5.0The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not en…
• CVE-2010-3685中 5.0The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not ch…
• CVE-2010-3091中 5.0The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not ve…
• CVE-2008-6836中 6.8Cross-site request forgery (CSRF) vulnerability in OpenID 5.x before 5x.-1.2, a module for Drupal, allows remote attackers to hijack the aut…