CVE-2012-2077

no score yetEPSS 0.7%

Cross-site request forgery (CSRF) vulnerability in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to hijack the authentication of users with administer sharethis permissions via unknown vectors "outside of the Form API."

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2012-08-14
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

rob_loach:sharethis

References

http://drupal.org/node/1504746
http://drupal.org/node/1506448
http://drupalcode.org/project/sharethis.git/commit/11f247a
http://secunia.com/advisories/48598
http://www.openwall.com/lists/oss-security/2012/04/07/1

Check your stack JSON