CVE-2008-6169

Severity Score

6.8

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Cross-site request forgery (CSRF) vulnerability in the Localization client 5.x before 5.x-1.1 and 6.x before 6.x-1.6 and the Localization server 5.x before 5.x-1.0-alpha5 and 6.x before 6.x-alpha2, modules for Drupal, allows remote attackers to perform unauthorized actions as administrators via unspecified vectors related to the "local translation submission interface."

Una vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en los modulos para Drupal Localization Client 5.x antes de 5.x-1.1 y 6.x antes de 6.x-1.6 y Localization Server 5.x antes de 5.x-1.0-alpha5 y 6. x antes de 6.x-alfa2, permite a atacantes remotos realizar acciones no autorizadas como administradores a través de vectores no especificados relacionados con el "interfaz de envío local de traducciones".

*Credits: N/A

CVSS Scores

NISTv2 6.8

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2009-02-19 CVE Reserved
2009-02-19 CVE Published
2023-03-07 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-352: Cross-Site Request Forgery (CSRF)

CAPEC

References (3)

URL	Tag	Source
https://exchange.xforce.ibmcloud.com/vulnerabilities/46044	Vdb Entry

URL	Date	SRC

URL	Date	SRC
http://drupal.org/node/324862	2017-08-17

URL	Date	SRC
http://secunia.com/advisories/32388	2017-08-17

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Drupal Search vendor "Drupal"		Localization Client Search vendor "Drupal" for product "Localization Client"				<= 5.x-1.0 Search vendor "Drupal" for product "Localization Client" and version " <= 5.x-1.0"		-		Affected
Drupal Search vendor "Drupal"		Localization Client Search vendor "Drupal" for product "Localization Client"				<= 6.x-1.5 Search vendor "Drupal" for product "Localization Client" and version " <= 6.x-1.5"		-		Affected
Drupal Search vendor "Drupal"		Localization Client Search vendor "Drupal" for product "Localization Client"				5.x-1.xdev Search vendor "Drupal" for product "Localization Client" and version "5.x-1.xdev"		-		Affected
Drupal Search vendor "Drupal"		Localization Client Search vendor "Drupal" for product "Localization Client"				6.x-1.0 Search vendor "Drupal" for product "Localization Client" and version "6.x-1.0"		-		Affected
Drupal Search vendor "Drupal"		Localization Client Search vendor "Drupal" for product "Localization Client"				6.x-1.1 Search vendor "Drupal" for product "Localization Client" and version "6.x-1.1"		-		Affected
Drupal Search vendor "Drupal"		Localization Client Search vendor "Drupal" for product "Localization Client"				6.x-1.2 Search vendor "Drupal" for product "Localization Client" and version "6.x-1.2"		-		Affected
Drupal Search vendor "Drupal"		Localization Client Search vendor "Drupal" for product "Localization Client"				6.x-1.3 Search vendor "Drupal" for product "Localization Client" and version "6.x-1.3"		-		Affected
Drupal Search vendor "Drupal"		Localization Client Search vendor "Drupal" for product "Localization Client"				6.x-1.4 Search vendor "Drupal" for product "Localization Client" and version "6.x-1.4"		-		Affected
Drupal Search vendor "Drupal"		Localization Client Search vendor "Drupal" for product "Localization Client"				6.x-1.xdev Search vendor "Drupal" for product "Localization Client" and version "6.x-1.xdev"		-		Affected
Drupal Search vendor "Drupal"		Localization Server Search vendor "Drupal" for product "Localization Server"				<= 5.x-1.0alpha4 Search vendor "Drupal" for product "Localization Server" and version " <= 5.x-1.0alpha4"		-		Affected
Drupal Search vendor "Drupal"		Localization Server Search vendor "Drupal" for product "Localization Server"				<= 6.x-1.0alpha1 Search vendor "Drupal" for product "Localization Server" and version " <= 6.x-1.0alpha1"		-		Affected
Drupal Search vendor "Drupal"		Localization Server Search vendor "Drupal" for product "Localization Server"				5.x-1.0alpha1 Search vendor "Drupal" for product "Localization Server" and version "5.x-1.0alpha1"		-		Affected
Drupal Search vendor "Drupal"		Localization Server Search vendor "Drupal" for product "Localization Server"				5.x-1.0alpha2 Search vendor "Drupal" for product "Localization Server" and version "5.x-1.0alpha2"		-		Affected
Drupal Search vendor "Drupal"		Localization Server Search vendor "Drupal" for product "Localization Server"				5.x-1.0alpha3 Search vendor "Drupal" for product "Localization Server" and version "5.x-1.0alpha3"		-		Affected
Drupal Search vendor "Drupal"		Localization Server Search vendor "Drupal" for product "Localization Server"				5.x-1.xdev Search vendor "Drupal" for product "Localization Server" and version "5.x-1.xdev"		-		Affected
Drupal Search vendor "Drupal"		Localization Server Search vendor "Drupal" for product "Localization Server"				6.x-1.xdev Search vendor "Drupal" for product "Localization Server" and version "6.x-1.xdev"		-		Affected