← Database

CVE-2008-3220

MEDIUM CVSS: 4.3 Published: 2008-07-18 Modified: 2026-06-16

Description

Cross-site request forgery (CSRF) vulnerability in Drupal 5.x before 5.8 and 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of "translated strings."

Affected Platforms

Drupal DrupalFedoraproject Fedora

Weakness Type

CWE-352

References