Unrated severityNVD Advisory· Published Aug 31, 2012· Updated Jun 16, 2026

CVE-2012-2116

Description

Cross-site request forgery (CSRF) vulnerability in the Commerce Reorder module before 7.x-1.1 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that add items to the shopping cart.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Commerceguys/Commerce Reorder2 versions
cpe:2.3:a:commerceguys:commerce_reorder:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:commerceguys:commerce_reorder:*:*:*:*:*:*:*:*range: <=7.x-1.0
- cpe:2.3:a:commerceguys:commerce_reorder:7.x-1.x:dev:*:*:*:*:*:*
Drupal/Commerce Reorderllm-create
Range: <7.x-1.1

Patches

Vulnerability mechanics

References

drupalcode.org/project/commerce_reorder.git/commit/bf060abnvdPatch
secunia.com/advisories/48912nvdVendor Advisory
drupal.org/node/1538198nvd
www.openwall.com/lists/oss-security/2012/04/18/11nvd
www.openwall.com/lists/oss-security/2012/04/19/1nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000