Drupal ‘SimpleMeta’模块跨站请求伪造漏洞

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1172563 漏洞类型 跨站请求伪造
发布时间 2012-06-19 更新时间 2012-06-19
CVE编号 CVE-2012-2729 CNNVD-ID CNNVD-201206-295
漏洞平台 N/A CVSS评分 6.8
|漏洞来源
https://cxsecurity.com/issue/WLB-2012060160
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-201206-295
|漏洞详情
Drupal是Drupal社区所维护的一套用PHP语言开发的免费、开源的内容管理系统。Drupal中的TheSimpleMeta模块中存在跨站请求伪造漏洞。远程攻击者可利用该漏洞执行某些未授权操作,进而获取受影响应用程序的访问权,也可能存在其他攻击。SimpleMeta6.x-2.0之前版本到6.x-1.x版本中存在漏洞。
|漏洞EXP
View online: http://drupal.org/node/1632908

  * Advisory ID: DRUPAL-SA-CONTRIB-2012-100
  * Project: SimpleMeta [1] (third-party module)
  * Version: 6.x
  * Date: 2012-June-13
  * Security risk: Moderately critical [2]
  * Exploitable from: Remote
  * Vulnerability: Cross Site Request Forgery

-------- DESCRIPTION  
---------------------------------------------------------

The Simple Meta module provides a method to set meta tags, such as page
title, description and keywords for nodes, views and other pages.

The module doesn't sufficiently confirm user intent when adding and deleting
meta tag entries allowing a malicious user to trick a site admin into
deleting entries or adding inappropriate entries.

CVE: Requested

-------- VERSIONS AFFECTED  
---------------------------------------------------

  * Simple meta 6.x-1.x all versions prior to 6.x-2.0.

Drupal core is not affected. If you do not use the contributed SimpleMeta [3]
module, there is nothing you need to do.

-------- SOLUTION  
------------------------------------------------------------

Install the latest version:

  * If you use the Simple meta module for Drupal 6.x, upgrade to Simple meta
    6.x-2.0 [4]

The 6.x-1.x branch is no longer supported and all users of that branch should
upgrade to the 6.x-2.x code.

Also see the SimpleMeta [5] project page.

-------- REPORTED BY  
---------------------------------------------------------

  * Nicholas Thompson [6]

-------- FIXED BY  
------------------------------------------------------------

  * Alexander [7] the module maintainer

-------- COORDINATED BY  
------------------------------------------------------

  * Greg Knaddison [8] of the Drupal Security Team
  * Michael Hess [9] of the Drupal Security Team

-------- CONTACT AND MORE INFORMATION  
----------------------------------------

The Drupal security team can be reached at security at drupal.org or via the
contact form at http://drupal.org/contact [10].

Learn more about the Drupal Security team and their policies [11], writing
secure code for Drupal [12], and securing your site [13].


[1] http://drupal.org/project/simplemeta
[2] http://drupal.org/security-team/risk-levels
[3] http://drupal.org/project/simplemeta
[4] http://drupal.org/node/1534874
[5] http://drupal.org/project/simplemeta
[6] http://drupal.org/user/59351
[7] http://drupal.org/user/366450
[8] http://drupal.org/user/36762
[9] http://drupal.org/user/102818
[10] http://drupal.org/contact
[11] http://drupal.org/security-team
[12] http://drupal.org/writing-secure-code
[13] http://drupal.org/security/secure-configuration

_______________________________________________
Security-news mailing list
Security-news@drupal.org
Unsubscribe at http://lists.drupal.org/mailman/listinfo/security-news

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
|参考资料

来源:XF
名称:drupal-simplemeta-unspecified-csrf(76344)
链接:http://xforce.iss.net/xforce/xfdb/76344
来源:BID
名称:53997
链接:http://www.securityfocus.com/bid/53997
来源:MLIST
名称:[oss-security]20120613Re:CVERequestforDrupalcontributedmodules
链接:http://www.openwall.com/lists/oss-security/2012/06/14/3
来源:drupal.org
链接:http://drupal.org/node/1632908
来源:drupal.org
链接:http://drupal.org/node/1534874