https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 12:29:51 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-178490 EUVD-2026-178490 https://cve.radiocsirt.org/vuln/euvd-2026-178490 https://cve.radiocsirt.org/vuln/fkie_cve-2007-6752 <p>Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that end a session via the user/logout URI. NOTE: the vendor disputes the significance of this issue, by considering the &#34;security benefit against platform complexity and performance impact&#34; and concluding that a change to the logout behavior is not planned because &#34;for most sites it is not worth the trade-off.</p> <p>Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that end a session via the user/logout URI. NOTE: the vendor disputes the significance of this issue, by considering the &#34;security benefit against platform complexity and performance impact&#34; and concluding that a change to the logout behavior is not planned because &#34;for most sites it is not worth the trade-off.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2007-6752 https://cve.radiocsirt.org/vuln/ghsa-jchx-5q5h-f574 <p>** DISPUTED ** Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that end a session via the user/logout URI. NOTE: the vendor disputes the significance of this issue, by considering the &#34;security benefit against platform complexity and performance impact&#34; and concluding that a change to the logout behavior is not planned because &#34;for most sites it is not worth the trade-off.&#34;</p> <p>** DISPUTED ** Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that end a session via the user/logout URI. NOTE: the vendor disputes the significance of this issue, by considering the &#34;security benefit against platform complexity and performance impact&#34; and concluding that a change to the logout behavior is not planned because &#34;for most sites it is not worth the trade-off.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-jchx-5q5h-f574 https://cve.radiocsirt.org/vuln/gsd-2007-6752 gsd-2007-6752 https://cve.radiocsirt.org/vuln/gsd-2007-6752 https://cve.radiocsirt.org/vuln/ubuntu-cve-2007-6752 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: drupal7</p> <p>Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that end a session via the user/logout URI. NOTE: the vendor disputes the significance of this issue, by considering the &#34;security benefit against platform complexity and performance impact&#34; and concluding that a change to the logout behavior is not planned because &#34;for most sites it is not worth the trade-off.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: drupal7</p> <p>Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that end a session via the user/logout URI. NOTE: the vendor disputes the significance of this issue, by considering the &#34;security benefit against platform complexity and performance impact&#34; and concluding that a change to the logout behavior is not planned because &#34;for most sites it is not worth the trade-off.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2007-6752