Unrated severityNVD Advisory· Published Aug 18, 2015· Updated Jun 17, 2026

CVE-2015-5508

Description

Cross-site request forgery (CSRF) vulnerability in the XC NCIP Provider module in the eXtensible Catalog (XC) Drupal Toolkit allows remote attackers to hijack the authentication of users with the "administer ncip providers" permission for requests that alter NCIP providers via a crafted request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

The Extensible Catalog Drupal Toolkit Project/The Extensible Catalog Drupal Toolkit
cpe:2.3:a:the_extensible_catalog_drupal_toolkit_project:the_extensible_catalog_drupal_toolkit:-:*:*:*:*:drupal:*:*
WordPress/XC NCIP Providerllm-create

Patches

Vulnerability mechanics

References

www.drupal.org/node/2507619nvdVendor Advisory
www.openwall.com/lists/oss-security/2015/07/04/4nvd
www.securityfocus.com/bid/75277nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000