Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in the persona_xsrf_token function in persona.module in the Mozilla Persona module 7.x-1.x before 7.x-1.11 for Drupal allows remote attackers to hijack the authentication of aribitrary users via a security token that is not a string data type.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Drupal Mozilla Persona模块跨站请求伪造漏洞
Vulnerability Description
Drupal是Drupal社区的一套使用PHP语言开发的开源内容管理系统。Mozilla Persona是其中的一个安全身份验证模块。 Mozilla Persona module 7.x-1.11之前的7.x-1.x版本（用于Drupal）中的persona.module的‘persona_xsrf_token’函数存在跨站请求伪造漏洞。攻击者可利用该漏洞实施跨站脚本攻击，造成Web缓存中毒或执行其他操作。
CVSS Information
N/A
Vulnerability Type
N/A