CVEvulnerability

CVE-2008-6169

6.8 MEDIUM Published 2009-02-19 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-02-19
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in the Localization client 5.x before 5.x-1.1 and 6.x before 6.x-1.6 and the Localization server 5.x before 5.x-1.0-alpha5 and 6.x before 6.x-alpha2, modules for Drupal, allows remote attackers to perform unauthorized actions as administrators via unspecified vectors related to the "local translation submission interface."

Affected configurations

• drupal localization client (<= 5.x-1.0) • drupal localization client (<= 6.x-1.5) • drupal localization client 5.x-1.xdev • drupal localization client 6.x-1.0 • drupal localization client 6.x-1.1 • drupal localization client 6.x-1.2 • drupal localization client 6.x-1.3 • drupal localization client 6.x-1.4 • drupal localization client 6.x-1.xdev • drupal localization server (<= 5.x-1.0alpha4) • drupal localization server (<= 6.x-1.0alpha1) • drupal localization server 5.x-1.0alpha1 • drupal localization server 5.x-1.0alpha2 • drupal localization server 5.x-1.0alpha3 • drupal localization server 5.x-1.xdev • drupal localization server 6.x-1.xdev

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References