Project: 
Ubercart
Date: 
2019-March-06
Security risk: 
Moderately critical 12 ∕ 25 AC:None/A:Admin/CI:None/II:Some/E:Proof/TD:Default
Vulnerability: 
Cross Site Request Forgery
Description: 

The Ubercart module provides a shopping cart and e-commerce features for Drupal.

The taxes module doesn't sufficiently protect the tax rate cloning feature. A malicious user could trick a store administrator into duplicating an existing tax rate by getting them to visit a specially-crafted URL.

Solution: 

Install the latest version:

Reported By: 
Fixed By: 
Coordinated By: