drupal
Page content
- Author: voroskoi
- Vulnerable: 4.7.3-2siwenna1
- Unaffected: 4.7.5-1siwenna1
A weakness has been reported in Drupal, which can be exploited by malicious users to conduct spoofing attacks. The weakness is caused due to an unspecified error and can be exploited to change the page cache so existing pages return “page not found” errors. Successful exploitation requires valid user credentials with the ability to post content. It also requires the page cache to be enabled and that MySQL is used.
- Bug Tracker URL: http://bugs.frugalware.org/task/1589
CVEs:
- There is no CVE for this issue, see: http://secunia.com/advisories/23586