| Gói / sản phẩm | Phiên bản bị ảnh hưởng | Phiên bản đã vá |
|---|---|---|
| drupal | = 4.0= 4.0.0= 4.1.0= 4.2.0_rc= 4.4= 4.4.0= 4.4.1= 4.4.2= 4.4.3= 4.5= 4.5.0= 4.5.1= 4.5.2= 4.5.3= 4.5.4= 4.5.5= 4.5.6= 4.5.7= 4.5.8= 4.6= 4.6.0= 4.6.1= 4.6.10= 4.6.11= 4.6.2= 4.6.3= 4.6.4= 4.6.5= 4.6.6= 4.6.7= 4.6.8= 4.6.9= 4.7= 4.7.0= 4.7.1= 4.7.10= 4.7.2= 4.7.3= 4.7.4= 4.7.5= 4.7.6= 4.7.7= 4.7.8= 4.7.9= 4.7_rev1.15= 4.7_rev_1.15= 4.7_rev_1.2= 4.7_revision_1.2= 5.0= 5.1= 5.10= 5.11= 5.12= 5.13= 5.14= 5.15= 5.16= 5.17= 5.18= 5.19= 5.1_rev1.1= 5.2= 5.20= 5.21= 5.22= 5.23= 5.3= 5.4= 5.5= 5.5.= 5.6= 5.7= 5.8= 5.9= 5.x= 6.0= 6.1= 6.10= 6.11= 6.12= 6.13= 6.14= 6.15= 6.16= 6.17= 6.18= 6.19= 6.2= 6.20= 6.21= 6.22= 6.23= 6.24= 6.3= 6.4= 6.5= 6.6= 6.7= 6.8= 6.9= 6.x-dev= 7.0= 7.1= 7.10= 7.11= 7.2= 7.3= 7.4= 7.5= 7.6= 7.7= 7.8= 7.9= 7.x-dev≤ 7.12 |
Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that end a session via the user/logout URI. NOTE: the vendor disputes the significance of this issue, by considering the "security benefit against platform complexity and performance impact" and concluding that a change to the logout behavior is not planned because "for most sites it is not worth the trade-off.
Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.
Quét site miễn phí