Unscored CVE-2008-3221 EUVD-2008-3210GHSA-966g-5893-w2jh

Cross-site request forgery (CSRF) vulnerability in Drupal 6.x before 6.3 allows remote attackers to perform administrative actions via vect…

Published Jul 18, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site request forgery (CSRF) vulnerability in Drupal 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of OpenID identities.

References

30168 vdb-entry
http://drupal.org/node/280571
https://bugzilla.redhat.com/show_bug.cgi?id=454849
FEDORA-2008-6916 vendor-advisory
31079 third-party-advisory
FEDORA-2008-6415 vendor-advisory
[oss-security] 20080710 CVE request: multiple drupal issues in < 6.3,5.8 mailing-list
FEDORA-2008-6411 vendor-advisory