CVE-2008-3744

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.10 and 6.x before 6.4 allow remote attackers to hijack the authentication of administrators for requests that (1) add or (2) delete user access rules.

References

https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html

https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/44448

https://bugzilla.redhat.com/show_bug.cgi?id=459108

http://www.vupen.com/english/advisories/2008/2392

http://www.securityfocus.com/bid/30689

http://secunia.com/advisories/31825

http://secunia.com/advisories/31462

http://drupal.org/node/295053

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS