Mend Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2010-4519

Good to know:

icon

Date: December 23, 2010

Multiple cross-site request forgery (CSRF) vulnerabilities in the Views UI implementation in the Views module 5.x before 5.x-1.8 and 6.x before 6.x-2.11 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) enable all Views or (2) disable all Views.

Language: PHP

Severity Score

Related Resources (4)

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4519
https://git.drupalcode.org/project/views/commit/e2bee0d231333cdd9e2de941455d41579d318ef4
https://nvd.nist.gov/vuln/detail/CVE-2010-4519
https://www.mend.io/vulnerability-database/CVE-2010-4519

Severity Score

Weakness Type (CWE)

Cross-Site Request Forgery (CSRF)

CWE-352

Top Fix

icon

Upgrade Version

Upgrade to version 6.x-2.11

Learn More

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): PARTIAL
Integrity (I): PARTIAL
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us