medium6.8
CVE-2008-6169
Cross-site request forgery (CSRF) vulnerability in the Localization client 5.x before 5.x-1.1 and 6.x before 6.x-1.6 and the Localization server 5.x before 5.x…
Impact
Cross-site request forgery (CSRF) vulnerability in the Localization client 5.x before 5.x-1.1 and 6.x before 6.x-1.6 and the Localization server 5.x before 5.x-1.0-alpha5 and 6.x before 6.x-alpha2, modules for Drupal, allows remote attackers to perform unauthorized actions as administrators via unspecified vectors related to the "local translation submission interface."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Localization Client | through 5.x-1.0 through 6.x-1.5 Versions 5.x-1.xdev, 6.x-1.0, 6.x-1.1, 6.x-1.2 |
| Drupal | Localization Server | through 5.x-1.0alpha4 through 6.x-1.0alpha1 Versions 5.x-1.0alpha1, 5.x-1.0alpha2, 5.x-1.0alpha3, 5.x-1.xdev |