Read the docs

Decisions Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Decisions Project records in CISA KEV

No Decisions Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Decisions · all components

Priority LOW 31

Cross-site request forgery (CSRF) vulnerability in the Decisions module for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that remove individual voters via unspecified vector…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00636 Published 2015-06-15 No fix listed CWE-352
Open these records in search →