CVE-2008-3220: CSRF
Cross-site request forgery (CSRF) vulnerability in Drupal 5.x before 5.8 and 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of "translated strings."
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3220?
CVE-2008-3220 is classified as a medium severity vulnerability due to its potential impact on administrative actions on affected Drupal installations.
How do I fix CVE-2008-3220?
To fix CVE-2008-3220, update your Drupal installation to version 5.8 or later for Drupal 5.x, and to version 6.3 or later for Drupal 6.x.
What software versions are affected by CVE-2008-3220?
CVE-2008-3220 affects Drupal versions prior to 5.8 and 6.3, as well as Fedora 8 and 9 if they are running these versions.
What type of vulnerability is CVE-2008-3220?
CVE-2008-3220 is a cross-site request forgery (CSRF) vulnerability that allows attackers to perform unauthorized administrative actions.
Is it safe to use Drupal 5.x or 6.x after CVE-2008-3220 was disclosed?
Using Drupal 5.x or 6.x without applying the necessary updates puts your site at risk of being exploited through CVE-2008-3220.