CVE-2008-3220

2008-07-1816:41:00

CWE-352

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.7

Confidence

Low

EPSS

0.003

Percentile

68.1%

JSON

Cross-site request forgery (CSRF) vulnerability in Drupal 5.x before 5.8 and 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of “translated strings.”

Affected configurations

Nvd

Node

drupaldrupalRange5.0–5.8

drupaldrupalRange6.0–6.3

Node

fedoraprojectfedoraMatch8

fedoraprojectfedoraMatch9

VendorProductVersionCPE
drupaldrupal*cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*
fedoraprojectfedora8cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*
fedoraprojectfedora9cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
drupal	drupal	*	cpe:2.3:a:drupal:drupal::::::::
fedoraproject	fedora	8	cpe:2.3:o:fedoraproject:fedora:8:::::::*
fedoraproject	fedora	9	cpe:2.3:o:fedoraproject:fedora:9:::::::*