Multiple cross-site request forgery (CSRF) vulnerabilities in the Views UI implementation in the Views module 5.x before 5.x-1.8 and 6.x before 6.x-2.11 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) enable all Views or (2) disable all Views.
| Software | From | Fixed in |
|---|---|---|
| earl_miles / views | 5.x-1.0 | 5.x-1.0.x |
| earl_miles / views | 5.x-1.1-beta | 5.x-1.1-beta.x |
| earl_miles / views | 5.x-1.2-beta1 | 5.x-1.2-beta1.x |
| earl_miles / views | 5.x-1.3-beta1 | 5.x-1.3-beta1.x |
| earl_miles / views | 5.x-1.4-2-rc1 | 5.x-1.4-2-rc1.x |
| earl_miles / views | 5.x-1.4-rc1 | 5.x-1.4-rc1.x |
| earl_miles / views | 5.x-1.5 | 5.x-1.5.x |
| earl_miles / views | 5.x-1.6 | 5.x-1.6.x |
| earl_miles / views | 5.x-1.6-beta | 5.x-1.6-beta.x |
| earl_miles / views | 5.x-1.6-beta2 | 5.x-1.6-beta2.x |
| earl_miles / views | 5.x-1.6-beta3 | 5.x-1.6-beta3.x |
| earl_miles / views | 5.x-1.6-beta4 | 5.x-1.6-beta4.x |
| earl_miles / views | 5.x-1.6-beta5 | 5.x-1.6-beta5.x |
| earl_miles / views | 5.x-1.7 | 5.x-1.7.x |
| earl_miles / views | 5.x-1.x-dev | 5.x-1.x-dev.x |
| earl_miles / views | 6.x-2.0 | 6.x-2.0.x |
| earl_miles / views | 6.x-2.0-alpha1 | 6.x-2.0-alpha1.x |
| earl_miles / views | 6.x-2.0-alpha2 | 6.x-2.0-alpha2.x |
| earl_miles / views | 6.x-2.0-alpha3 | 6.x-2.0-alpha3.x |
| earl_miles / views | 6.x-2.0-alpha4 | 6.x-2.0-alpha4.x |
| earl_miles / views | 6.x-2.0-alpha5 | 6.x-2.0-alpha5.x |
| earl_miles / views | 6.x-2.0-beta1 | 6.x-2.0-beta1.x |
| earl_miles / views | 6.x-2.0-beta2 | 6.x-2.0-beta2.x |
| earl_miles / views | 6.x-2.0-beta3 | 6.x-2.0-beta3.x |
| earl_miles / views | 6.x-2.0-beta4 | 6.x-2.0-beta4.x |
| earl_miles / views | 6.x-2.0-rc1 | 6.x-2.0-rc1.x |
| earl_miles / views | 6.x-2.0-rc2 | 6.x-2.0-rc2.x |
| earl_miles / views | 6.x-2.0-rc3 | 6.x-2.0-rc3.x |
| earl_miles / views | 6.x-2.0-rc4 | 6.x-2.0-rc4.x |
| earl_miles / views | 6.x-2.0-rc5 | 6.x-2.0-rc5.x |
| earl_miles / views | 6.x-2.1 | 6.x-2.1.x |
| earl_miles / views | 6.x-2.10 | 6.x-2.10.x |
| earl_miles / views | 6.x-2.2 | 6.x-2.2.x |
| earl_miles / views | 6.x-2.3 | 6.x-2.3.x |
| earl_miles / views | 6.x-2.4 | 6.x-2.4.x |
| earl_miles / views | 6.x-2.5 | 6.x-2.5.x |
| earl_miles / views | 6.x-2.6 | 6.x-2.6.x |
| earl_miles / views | 6.x-2.7 | 6.x-2.7.x |
| earl_miles / views | 6.x-2.8 | 6.x-2.8.x |
| earl_miles / views | 6.x-2.9 | 6.x-2.9.x |
| earl_miles / views | 6.x-2.x-dev | 6.x-2.x-dev.x |
| earl_miles / views | 6.x-3.0-alpha1 | 6.x-3.0-alpha1.x |
| earl_miles / views | 6.x-3.0-alpha2 | 6.x-3.0-alpha2.x |
| earl_miles / views | 6.x-3.0-alpha3 | 6.x-3.0-alpha3.x |
| earl_miles / views | 6.x-3.x-dev | 6.x-3.x-dev.x |