** DISPUTED ** Cross-site request forgery (CSRF) vulnerability in Drupal
7.12 and earlier allows remote attackers to hijack the authentication of
arbitrary users for requests that end a session via the user/logout URI.
NOTE: the vendor disputes the significance of this issue, by considering
the "security benefit against platform complexity and performance impact"
and concluding that a change to the logout behavior is not planned because
"for most sites it is not worth the trade-off."
|Ubuntu 12.04 LTS (Precise Pangolin):||needs-triage
|Ubuntu 14.04 LTS (Trusty Tahr):||DNE
|Ubuntu Touch 15.04:||DNE
|Ubuntu Core 15.04:||DNE
|Ubuntu 16.04 LTS (Xenial Xerus):||DNE
|Ubuntu 16.10 (Yakkety Yak):||DNE
|Ubuntu 17.04 (Zesty Zapus):||DNE
Updated: 2017-04-14 08:14:08 UTC (commit 12390)