What is the severity of CVE-2008-6169?

The severity of CVE-2008-6169 is classified as high due to its potential for CSRF attacks that can lead to unauthorized actions by remote attackers.

How do I fix CVE-2008-6169?

To fix CVE-2008-6169, upgrade the Localization client and server modules to the patched versions 5.x-1.1 or 6.x-1.6 and above.

Which versions are affected by CVE-2008-6169?

CVE-2008-6169 affects Localization client versions prior to 5.x-1.1 and 6.x prior to 6.x-1.6, and Localization server versions prior to 5.x-1.0-alpha5 and 6.x prior to 6.x-alpha2.

What type of vulnerability is CVE-2008-6169?

CVE-2008-6169 is a Cross-Site Request Forgery (CSRF) vulnerability that allows remote attackers to perform actions as an authenticated user.

Who is at risk from CVE-2008-6169?

Websites using affected versions of the Drupal Localization client and server modules are at risk from CVE-2008-6169, particularly if they allow actions to be performed without adequate CSRF protection.

Vulnerability/
CVE-2008-6169

medium

6.8

CWE

352

19/2/2009

7/8/2024

CVE-2008-6169: CSRF

First published: Thu Feb 19 2009(Updated: )

Cross-site request forgery (CSRF) vulnerability in the Localization client 5.x before 5.x-1.1 and 6.x before 6.x-1.6 and the Localization server 5.x before 5.x-1.0-alpha5 and 6.x before 6.x-alpha2, modules for Drupal, allows remote attackers to perform unauthorized actions as administrators via unspecified vectors related to the "local translation submission interface."

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Drupal Localization Client	<=5.x-1.0
Drupal Localization Server	=5.x-1.0alpha1
Drupal Localization Client	=6.x-1.4
Drupal Localization Client	=5.x-1.xdev
Drupal Localization Server	=5.x-1.0alpha2
Drupal Localization Client	=6.x-1.0
Drupal Localization Server	<=5.x-1.0alpha4
Drupal Localization Server	=5.x-1.0alpha3
Drupal Localization Server	<=6.x-1.0alpha1
Drupal Localization Client	=6.x-1.2
Drupal Localization Server	=5.x-1.xdev
Drupal Localization Client	=6.x-1.xdev
Drupal Localization Server	=6.x-1.xdev
Drupal Localization Client	=6.x-1.3
Drupal Localization Client	=6.x-1.1
Drupal Localization Client	<=6.x-1.5

Remedy

http://drupal.org/node/324862

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2008-6169?
The severity of CVE-2008-6169 is classified as high due to its potential for CSRF attacks that can lead to unauthorized actions by remote attackers.
How do I fix CVE-2008-6169?
To fix CVE-2008-6169, upgrade the Localization client and server modules to the patched versions 5.x-1.1 or 6.x-1.6 and above.
Which versions are affected by CVE-2008-6169?
CVE-2008-6169 affects Localization client versions prior to 5.x-1.1 and 6.x prior to 6.x-1.6, and Localization server versions prior to 5.x-1.0-alpha5 and 6.x prior to 6.x-alpha2.
What type of vulnerability is CVE-2008-6169?
CVE-2008-6169 is a Cross-Site Request Forgery (CSRF) vulnerability that allows remote attackers to perform actions as an authenticated user.
Who is at risk from CVE-2008-6169?
Websites using affected versions of the Drupal Localization client and server modules are at risk from CVE-2008-6169, particularly if they allow actions to be performed without adequate CSRF protection.

collector/nvd-historical
collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/remedy
agent/last-modified-date
agent/weakness
agent/author
agent/references
agent/severity
agent/tags
agent/first-publish-date
agent/description
agent/event
agent/source
vendor/drupal
canonical/drupal localization client
version/drupal localization client/5.x-1.0
canonical/drupal localization server
version/drupal localization server/5.x-1.0alpha1
version/drupal localization client/6.x-1.4
version/drupal localization client/5.x-1.xdev
version/drupal localization server/5.x-1.0alpha2
version/drupal localization client/6.x-1.0
version/drupal localization server/5.x-1.0alpha4
version/drupal localization server/5.x-1.0alpha3
version/drupal localization server/6.x-1.0alpha1
version/drupal localization client/6.x-1.2
version/drupal localization server/5.x-1.xdev
version/drupal localization client/6.x-1.xdev
version/drupal localization server/6.x-1.xdev
version/drupal localization client/6.x-1.3
version/drupal localization client/6.x-1.1
version/drupal localization client/6.x-1.5

Frequently Asked Questions

What is the severity of CVE-2008-6169?
The severity of CVE-2008-6169 is classified as high due to its potential for CSRF attacks that can lead to unauthorized actions by remote attackers.
How do I fix CVE-2008-6169?
To fix CVE-2008-6169, upgrade the Localization client and server modules to the patched versions 5.x-1.1 or 6.x-1.6 and above.
Which versions are affected by CVE-2008-6169?
CVE-2008-6169 affects Localization client versions prior to 5.x-1.1 and 6.x prior to 6.x-1.6, and Localization server versions prior to 5.x-1.0-alpha5 and 6.x prior to 6.x-alpha2.
What type of vulnerability is CVE-2008-6169?
CVE-2008-6169 is a Cross-Site Request Forgery (CSRF) vulnerability that allows remote attackers to perform actions as an authenticated user.
Who is at risk from CVE-2008-6169?
Websites using affected versions of the Drupal Localization client and server modules are at risk from CVE-2008-6169, particularly if they allow actions to be performed without adequate CSRF protection.

CVE-2008-6169: CSRF

Remedy

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2008-6169?

How do I fix CVE-2008-6169?

Which versions are affected by CVE-2008-6169?

What type of vulnerability is CVE-2008-6169?

Who is at risk from CVE-2008-6169?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2008-6169?

How do I fix CVE-2008-6169?

Which versions are affected by CVE-2008-6169?

What type of vulnerability is CVE-2008-6169?

Who is at risk from CVE-2008-6169?