Unrated severityNVD Advisory· Published Aug 31, 2012· Updated Apr 29, 2026

CVE-2012-2116

Description

Cross-site request forgery (CSRF) vulnerability in the Commerce Reorder module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that add items to the shopping cart.

Affected products

Commerceguys/Commerce Reorder2 versions
cpe:2.3:a:commerceguys:commerce_reorder:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:commerceguys:commerce_reorder:*:*:*:*:*:*:*:*range: <=7.x-1.0
- cpe:2.3:a:commerceguys:commerce_reorder:7.x-1.x:dev:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

drupalcode.org/project/commerce_reorder.git/commit/bf060abnvdPatch
secunia.com/advisories/48912nvdVendor Advisory
drupal.org/node/1538198nvd
www.openwall.com/lists/oss-security/2012/04/18/11nvd
www.openwall.com/lists/oss-security/2012/04/19/1nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000