CVE-2007-6752

Priority
Low
Description
** DISPUTED ** Cross-site request forgery (CSRF) vulnerability in Drupal
7.12 and earlier allows remote attackers to hijack the authentication of
arbitrary users for requests that end a session via the user/logout URI.
NOTE: the vendor disputes the significance of this issue, by considering
the "security benefit against platform complexity and performance impact"
and concluding that a change to the logout behavior is not planned because
"for most sites it is not worth the trade-off."
References
Package
Upstream:needs-triage
Ubuntu 17.10 (Artful Aardvark):needed
Ubuntu 12.04 ESM (Precise Pangolin):DNE (precise was needed)
Ubuntu 14.04 LTS (Trusty Tahr):needed
Ubuntu Touch 15.04:DNE
Ubuntu Core 15.04:DNE
Ubuntu 16.04 LTS (Xenial Xerus):needed
Ubuntu 16.10 (Yakkety Yak):needed
Ubuntu 17.04 (Zesty Zapus):needed
Package
Upstream:needs-triage
Ubuntu 17.10 (Artful Aardvark):DNE
Ubuntu 12.04 ESM (Precise Pangolin):DNE (precise was needs-triage)
Ubuntu 14.04 LTS (Trusty Tahr):DNE
Ubuntu Touch 15.04:DNE
Ubuntu Core 15.04:DNE
Ubuntu 16.04 LTS (Xenial Xerus):DNE
Ubuntu 16.10 (Yakkety Yak):DNE
Ubuntu 17.04 (Zesty Zapus):DNE
More Information

Updated: 2017-05-10 22:14:13 UTC (commit 12521)