CVE-2007-6752

Priority
Low
Description
** DISPUTED ** Cross-site request forgery (CSRF) vulnerability in Drupal
7.12 and earlier allows remote attackers to hijack the authentication of
arbitrary users for requests that end a session via the user/logout URI.
NOTE: the vendor disputes the significance of this issue, by considering
the "security benefit against platform complexity and performance impact"
and concluding that a change to the logout behavior is not planned because
"for most sites it is not worth the trade-off."
References
Package
Upstream:needs-triage
Ubuntu 12.04 LTS (Precise Pangolin):needed
Ubuntu 14.04 LTS (Trusty Tahr):needed
Ubuntu Touch 15.04:DNE
Ubuntu Core 15.04:DNE
Ubuntu 15.10 (Wily Werewolf):ignored (reached end-of-life)
Ubuntu 16.04 LTS (Xenial Xerus):needed
Ubuntu 16.10 (Yakkety Yak):needed
Package
Upstream:needs-triage
Ubuntu 12.04 LTS (Precise Pangolin):needs-triage
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Ubuntu Touch 15.04:DNE
Ubuntu Core 15.04:DNE
Ubuntu 15.10 (Wily Werewolf):DNE
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 16.10 (Yakkety Yak):DNE
More Information

Updated: 2016-08-01 16:14:51 UTC (commit 11295)