CVE-2012-2155

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-08-14 · updated 2026-06-16
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in the CDN2 Video module 6.x for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected products

Kyle Browning Cdn2 Video: 6.x-1.x

References

http://drupal.org/node/1506542
http://www.openwall.com/lists/oss-security/2012/05/03/1
http://www.openwall.com/lists/oss-security/2012/05/03/2
http://www.osvdb.org/80686
http://www.securityfocus.com/bid/52812
https://exchange.xforce.ibmcloud.com/vulnerabilities/74522
http://drupal.org/node/1506542
http://www.openwall.com/lists/oss-security/2012/05/03/1
http://www.openwall.com/lists/oss-security/2012/05/03/2
http://www.osvdb.org/80686
http://www.securityfocus.com/bid/52812
https://exchange.xforce.ibmcloud.com/vulnerabilities/74522

Get alerted when CVE-2012-2155 or the next vulnerability affects your stack