Drupal : Security Vulnerabilities, CVEs, Published In 2017 (CSRF)
Some administrative paths in Drupal 8.2.x before 8.2.7 did not include protection for CSRF. This would allow an attacker to disable some blocks on a site. This issue is mitigated by the fact that users would have to know the block ID.
Max CVSS
7.5
EPSS Score
0.13%
Published
2017-03-16
Updated
2017-07-12
1 vulnerabilities found