[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxhmDBxJ9vRwUVEGmMfquT8H2doELsWpU2yKBeK_XMvA":3,"g5a-risk:CVE-2015-4391":143},{"success":4,"data":5,"meta":141},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":28,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":54,"references":55,"referencesCount":86,"weaknesses":87,"weaknessesCount":96,"isActivelyExploited":31,"cisaInfo":28,"otxData":28,"relatedBlogPosts":97,"seoMetadata":98,"configurations":123,"relatedVendorCves":139,"notableEvents":140},"CVE-2015-4391","What is CVE-2015-4391?","Cross-site request forgery (CSRF) vulnerability in the CiviCRM private report module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of users for requests that delete reports via unspecified vectors.","Cross-site request forgery (CSRF) vulnerability in the CiviCRM private report module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allows remo...","2015-06-15T14:59:46.403","2026-06-17T00:27:13.14",6.8,"AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":32},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":24,"ExploitabilityScore":29,"ImpactScore":30,"ACInsufInfo":31,"ObtainAllPrivilege":31,"ObtainUserPrivilege":31,"ObtainOtherPrivilege":31,"UserInteractionRequired":4},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","MEDIUM","NONE","PARTIAL","",null,8.6,6.4,false,[],0.00656,[33,33,33,33,33,33,33],"Medium",[37,42,45,48,51],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"civicrm","civicrm_private_report","6.x-1.0","cpe:2.3:a:civicrm:civicrm_private_report:6.x-1.0:*:*:*:*:drupal:*:*",{"vendor":38,"product":39,"version":43,"criteria":44,"vulnerable":4},"6.x-1.1","cpe:2.3:a:civicrm:civicrm_private_report:6.x-1.1:*:*:*:*:drupal:*:*",{"vendor":38,"product":39,"version":46,"criteria":47,"vulnerable":4},"7.x-1.0","cpe:2.3:a:civicrm:civicrm_private_report:7.x-1.0:*:*:*:*:drupal:*:*",{"vendor":38,"product":39,"version":49,"criteria":50,"vulnerable":4},"7.x-1.1","cpe:2.3:a:civicrm:civicrm_private_report:7.x-1.1:*:*:*:*:drupal:*:*",{"vendor":38,"product":39,"version":52,"criteria":53,"vulnerable":4},"7.x-1.2","cpe:2.3:a:civicrm:civicrm_private_report:7.x-1.2:*:*:*:*:drupal:*:*",5,[56,60,64,69,72,76,78,80,82,84],{"url":57,"source":58,"tags":59},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2015\u002F04\u002F25\u002F6","Openwall",[],{"url":61,"source":62,"tags":63},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F74351","Securityfocus",[],{"url":65,"source":66,"tags":67},"https:\u002F\u002Fwww.drupal.org\u002Fnode\u002F2467631","Drupal",[68],"Patch",{"url":70,"source":66,"tags":71},"https:\u002F\u002Fwww.drupal.org\u002Fnode\u002F2467635",[68],{"url":73,"source":66,"tags":74},"https:\u002F\u002Fwww.drupal.org\u002Fnode\u002F2467697",[68,75],"Vendor Advisory",{"url":57,"source":58,"tags":77},[],{"url":61,"source":62,"tags":79},[],{"url":65,"source":66,"tags":81},[68],{"url":70,"source":66,"tags":83},[68],{"url":73,"source":66,"tags":85},[68,75],10,[88],{"id":89,"name":90,"description":91,"extendedDescription":92,"status":93,"abstraction":94,"structure":95},"CWE-352","Cross-Site Request Forgery (CSRF)","The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.","When a web server is designed to receive a request from a client without any mechanism for verifying that it was intentionally sent, then it might be possible for an attacker to trick a client into making an unintentional request to the web server which will be treated as an authentic request. This can be done via a URL, image load, XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","Stable","Compound","Composite",1,[],{"title":99,"metaDescription":100,"keywords":101,"canonicalUrl":102,"structuredData":103},"What is CVE-2015-4391? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2015-4391, a medium severity cyber security vulnerability from 2015. Cross-site request forgery (CSRF) vulnerability in the Civ...","CVE-2015-4391, CVE-2015-4391 vulnerability, CVE-2015-4391 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2015, CVSS score, exploit, patch, remediation, civicrm security, civicrm_private_report vulnerability","\u002Fwhat-is\u002Fcve-2015-4391",{"@context":104,"@type":105,"headline":99,"description":100,"datePublished":10,"dateModified":11,"author":106,"publisher":110,"about":114,"mainEntityOfPage":118,"articleSection":121,"keywords":122},"https:\u002F\u002Fschema.org","TechArticle",{"@type":107,"name":108,"url":109},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":107,"name":108,"url":109,"logo":111},{"@type":112,"url":113},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":115,"name":6,"description":116,"additionalType":117},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":119,"@id":120},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2015-4391","Cybersecurity","CVE-2015-4391, CVE-2015-4391 vulnerability, CVE-2015-4391 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[124],{"Operator":28,"Negate":28,"Nodes":125},[126],{"Operator":127,"Negate":31,"CPEMatch":128},"OR",[129,131,133,135,137],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":130,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"C2FDB2B9-2C30-4CE1-AAE2-22DEF605B7DD",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":132,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"11028F6B-FEFA-4D1B-8394-7543915DC3B8",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":134,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"9D3EE281-99B9-4070-9673-302105F9016F",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":136,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"8582B3EE-FB66-48F7-8079-374DFE17D4D6",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":138,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"A833CD03-235B-4153-A4F1-D7A6B54730D6",[],[],{"lastModified":11,"cacheTime":142,"version":22},1793224636552,{"score":144,"band":145,"action":146,"scoredAt":147},21,"Low","Monitor","2026-07-01T10:19:29.772319+00:00"]