CVE-2008-6169: CSRF
Cross-site request forgery (CSRF) vulnerability in the Localization client 5.x before 5.x-1.1 and 6.x before 6.x-1.6 and the Localization server 5.x before 5.x-1.0-alpha5 and 6.x before 6.x-alpha2, modules for Drupal, allows remote attackers to perform unauthorized actions as administrators via unspecified vectors related to the "local translation submission interface."
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-6169?
The severity of CVE-2008-6169 is classified as high due to its potential for CSRF attacks that can lead to unauthorized actions by remote attackers.
How do I fix CVE-2008-6169?
To fix CVE-2008-6169, upgrade the Localization client and server modules to the patched versions 5.x-1.1 or 6.x-1.6 and above.
Which versions are affected by CVE-2008-6169?
CVE-2008-6169 affects Localization client versions prior to 5.x-1.1 and 6.x prior to 6.x-1.6, and Localization server versions prior to 5.x-1.0-alpha5 and 6.x prior to 6.x-alpha2.
What type of vulnerability is CVE-2008-6169?
CVE-2008-6169 is a Cross-Site Request Forgery (CSRF) vulnerability that allows remote attackers to perform actions as an authenticated user.
Who is at risk from CVE-2008-6169?
Websites using affected versions of the Drupal Localization client and server modules are at risk from CVE-2008-6169, particularly if they allow actions to be performed without adequate CSRF protection.