Unrated severityNVD Advisory· Published Dec 31, 2009· Updated Apr 23, 2026
CVE-2009-4517
CVE-2009-4517
Description
Cross-site request forgery (CSRF) vulnerability in the FAQ Ask module 5.x and 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to hijack the authentication of arbitrary users for requests that access unpublished content.
Affected products
16cpe:2.3:a:nanwich:faq_ask:5.x-1.0:*:*:*:*:*:*:*+ 15 more
- cpe:2.3:a:nanwich:faq_ask:5.x-1.0:*:*:*:*:*:*:*
- cpe:2.3:a:nanwich:faq_ask:5.x-1.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:nanwich:faq_ask:5.x-1.0:beta2:*:*:*:*:*:*
- cpe:2.3:a:nanwich:faq_ask:5.x-1.0:beta3:*:*:*:*:*:*
- cpe:2.3:a:nanwich:faq_ask:5.x-1.0:beta4:*:*:*:*:*:*
- cpe:2.3:a:nanwich:faq_ask:5.x-1.1:*:*:*:*:*:*:*
- cpe:2.3:a:nanwich:faq_ask:5.x-1.2:*:*:*:*:*:*:*
- cpe:2.3:a:nanwich:faq_ask:5.x-1.3:*:*:*:*:*:*:*
- cpe:2.3:a:nanwich:faq_ask:5.x-1.x:dev:*:*:*:*:*:*
- cpe:2.3:a:nanwich:faq_ask:6.x-1.0:*:*:*:*:*:*:*
- cpe:2.3:a:nanwich:faq_ask:6.x-1.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:nanwich:faq_ask:6.x-1.1:*:*:*:*:*:*:*
- cpe:2.3:a:nanwich:faq_ask:6.x-1.2:*:*:*:*:*:*:*
- cpe:2.3:a:nanwich:faq_ask:6.x-1.x:dev:*:*:*:*:*:*
- cpe:2.3:a:nanwich:faq_ask:6.x-2.0:alpha1:*:*:*:*:*:*
- cpe:2.3:a:nanwich:faq_ask:6.x-2.x:dev:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- drupal.org/node/617444nvdPatchVendor Advisory
- secunia.com/advisories/37201nvdVendor Advisory
- www.vupen.com/english/advisories/2009/3088nvdVendor Advisory
News mentions
0No linked articles in our index yet.