PUBLISHED
2025-10-30 00:15
MODIFIED
2025-10-30 00:15
EPSS (Prob. Exploit)
0.13%
Top 97.2%
> DESCRIPTION
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Currency allows Cross Site Request Forgery.This issue affects Currency: from 0.0.0 before 3.5.0.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-352: Cross-Site Request Forgery - The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
> GITHUB SECURITY ADVISORY
GHSA-27fv-rpgj-4c6m
MODERATE
Drupal Currency allows Cross Site Request Forgery
AFFECTED PACKAGES:
COMPOSER / drupal/currency
< 3.5.0
Fixed in: 3.5.0
> HISTORIQUE DES MODIFICATIONS
Première apparition
30/10/2025 00:15
Source: NVD
📊
ENRICHISSEMENT
01/11/2026 06:58
CWE
Champ modifié: Description CWE
Ancienne valeur:
CWE-352: Cross-Site Request Forgery (CSRF) - The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could hav...
Nouvelle valeur:
CWE-352: Cross-Site Request Forgery - The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have origi...
📊
ENRICHISSEMENT
19/01/2026 17:36
CVEPROJECT
Champ modifié: CVE Project
📊
ENRICHISSEMENT
01/11/2025 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-352: Cross-Site Request Forgery (CSRF) - The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could hav...
Total des modifications: 3
Dernière mise à jour: 1 week ago