TI-2015-03688 CVE-2015-4390 · GHSA-6jq8-p8cw-824wMultiple cross-site request forgery (CSRF) vulnerabilities in the User Import module…Priority LOW 31Multiple cross-site request forgery (CSRF) vulnerabilities in the User Import module 6.x-4.x before 6.x-4.4 and 7.x-2.x before 7.x-2.3 for Drupal allow remote attackers to hijack the authentication of administrators for…CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.00643 · Published 2015-06-15 · No fix listed CWE-352