CVE-2008-3219: XSS
The Drupal filterxssadmin function in 5.x before 5.8 and 6.x before 6.3 does not "prevent use of the object HTML tag in administrator input," which has unknown impact and attack vectors, probably related to an insufficient cross-site scripting (XSS) protection mechanism.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3219?
CVE-2008-3219 is considered a moderate severity vulnerability due to its potential for cross-site scripting (XSS) exploits.
How do I fix CVE-2008-3219?
To fix CVE-2008-3219, upgrade Drupal to version 5.8 or later for 5.x, or to version 6.3 or later for 6.x.
Which versions of Drupal are affected by CVE-2008-3219?
CVE-2008-3219 affects Drupal versions prior to 5.8 in the 5.x series and versions prior to 6.3 in the 6.x series.
What can attackers exploit with CVE-2008-3219?
Attackers can exploit CVE-2008-3219 to execute arbitrary JavaScript code, leading to possible data theft or session hijacking through XSS.
Is CVE-2008-3219 still a concern for current Drupal installations?
CVE-2008-3219 is not a concern for current Drupal installations if they have been updated to the latest versions that address this vulnerability.