Unrated severityNVD Advisory· Published Sep 17, 2015· Updated May 6, 2026
CVE-2015-7233
CVE-2015-7233
Description
Cross-site request forgery (CSRF) vulnerability in the OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Import module is enabled, allows remote attackers to hijack the authentication of administrators for requests that create new OSF datasets via unspecified vectors.
Affected products
2cpe:2.3:a:structured_dynamics:open_semantic_framework:7.x-3.0:*:*:*:*:drupal:*:*+ 1 more
- cpe:2.3:a:structured_dynamics:open_semantic_framework:7.x-3.0:*:*:*:*:drupal:*:*
- cpe:2.3:a:structured_dynamics:open_semantic_framework:7.x-3.x:dev:*:*:*:drupal:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.drupal.org/node/2537120nvdPatch
- www.drupal.org/node/2537860nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.