CVE-2008-0272: CSRF
Published Jan 15, 2008
·Updated
Cross-site request forgery (CSRF) vulnerability in the aggregator module in Drupal 4.7.x before 4.7.11 and 5.x before 5.6 allows remote attackers to delete items from a feed as privileged users.
Affected Software
48 affected components
Drupal Drupal=4.0.0
Drupal Drupal=4.1.0
Drupal Drupal=4.2.0_rc
Drupal Drupal=4.4
Drupal Drupal=4.4.1
Drupal Drupal=4.4.2
Drupal Drupal=4.4.3
Drupal Drupal=4.5
Drupal Drupal=4.5.1
Drupal Drupal=4.5.2
Drupal Drupal=4.5.3
Drupal Drupal=4.5.4
Drupal Drupal=4.5.5
Drupal Drupal=4.5.6
Drupal Drupal=4.5.7
Drupal Drupal=4.5.8
Drupal Drupal=4.6
Drupal Drupal=4.6.1
Drupal Drupal=4.6.2
Drupal Drupal=4.6.3
Drupal Drupal=4.6.4
Drupal Drupal=4.6.5
Drupal Drupal=4.6.6
Drupal Drupal=4.6.7
Drupal Drupal=4.6.8
Drupal Drupal=4.6.9
Drupal Drupal=4.6.10
Drupal Drupal=4.6.11
Drupal Drupal=4.7
Drupal Drupal=4.7.1
Drupal Drupal=4.7.2
Drupal Drupal=4.7.3
Drupal Drupal=4.7.4
Drupal Drupal=4.7.5
Drupal Drupal=4.7.6
Drupal Drupal=4.7.7
Drupal Drupal=4.7.8
Drupal Drupal=4.7.9
Drupal Drupal=4.7.10
Drupal Drupal=4.7_rev_1.2
Drupal Drupal=4.7_rev_1.15
Drupal Drupal=5.0
Drupal Drupal=5.1
Drupal Drupal=5.1_rev1.1
Drupal Drupal=5.2
Drupal Drupal=5.3
Drupal Drupal=5.4
Drupal Drupal=5.5.
Remediation
Patch Available
Event History
Jan 15, 2008
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-0272?
CVE-2008-0272 has been classified as a moderate severity vulnerability due to its potential impact on affected systems.
2
How do I fix CVE-2008-0272?
To fix CVE-2008-0272, upgrade your Drupal installation to version 4.7.11 or higher, or 5.6 or higher.
3
Which versions of Drupal are affected by CVE-2008-0272?
CVE-2008-0272 affects Drupal versions 4.7.x before 4.7.11 and 5.x before 5.6.
4
What type of vulnerability is CVE-2008-0272?
CVE-2008-0272 is a cross-site request forgery (CSRF) vulnerability.
5
What can an attacker do with CVE-2008-0272?
An attacker exploiting CVE-2008-0272 can delete items from a feed as privileged users.