Security Advisory

CVE-2015-3388

5.8

Vulnerability Description

Cross-site request forgery (CSRF) vulnerability in the Commerce Balanced Payments module for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that delete the user's configured bank accounts via unspecified vectors.
Published Date April 21, 2015
Official Source NIST NVD Advisory