CVE-2012-5547

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-12-03 · updated 2026-06-16
Weakness: CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the Search API module 7.x-1.x before 7.x-1.3 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) enable a server via a server action or (2) enable a search index via an enable index action.

Affected products

Thomas Seidl Search Api: 7.x-1.0, 7.x-1.0-beta1, 7.x-1.0-beta10, 7.x-1.0-beta2, 7.x-1.0-beta3, 7.x-1.0-beta4 (+9)

References

http://drupal.org/node/1815124
http://drupal.org/node/1815770
http://www.openwall.com/lists/oss-security/2012/11/20/4
http://drupal.org/node/1815124
http://drupal.org/node/1815770
http://www.openwall.com/lists/oss-security/2012/11/20/4

Get alerted when CVE-2012-5547 or the next vulnerability affects your stack