← Database

CVE-2008-3221

MEDIUM CVSS: 4.3 Published: 2008-07-18 Modified: 2026-06-16

Description

Cross-site request forgery (CSRF) vulnerability in Drupal 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of OpenID identities.

Affected Platforms

Drupal DrupalFedoraproject Fedora

Weakness Type

CWE-352

References