CVE-2015-4355

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-06-15 · updated 2026-06-17
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in the Watchdog Aggregator module for Drupal allows remote attackers to hijack the authentication of administrators for requests that enable or disable monitoring sites via unspecified vectors.

Affected products

Watchdog Aggregator Project Watchdog Aggregator: all versions

References

http://www.openwall.com/lists/oss-security/2015/04/25/6
http://www.securityfocus.com/bid/72810
https://www.drupal.org/node/2437993
http://www.openwall.com/lists/oss-security/2015/04/25/6
http://www.securityfocus.com/bid/72810
https://www.drupal.org/node/2437993

Get alerted when CVE-2015-4355 or the next vulnerability affects your stack