CVE-2008-3221: CSRF
Published Jul 18, 2008
·Updated
Cross-site request forgery (CSRF) vulnerability in Drupal 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of OpenID identities.
Affected Software
3 affected components
Drupal Drupal>=6.0<6.3
fedoraproject fedora=9
fedoraproject fedora=8
Remediation
Patch Available
Event History
Jul 18, 2008
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-3221?
CVE-2008-3221 is classified as a high severity vulnerability due to its potential for unauthorized administrative actions.
2
How do I fix CVE-2008-3221?
To mitigate CVE-2008-3221, you should upgrade your Drupal installation to version 6.3 or later.
3
What systems are affected by CVE-2008-3221?
CVE-2008-3221 affects Drupal versions 6.0 to 6.2 and specific Fedora versions 8 and 9.
4
What type of vulnerability is CVE-2008-3221?
CVE-2008-3221 is a cross-site request forgery (CSRF) vulnerability.
5
What actions can be performed by exploiting CVE-2008-3221?
Exploitation of CVE-2008-3221 allows attackers to perform unauthorized administrative actions, including the deletion of OpenID identities.