CVE-2008-3221

Опубликовано: 18 июл. 2008

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in Drupal 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of OpenID identities.

Ссылки

http://drupal.org/node/280571
Patch
Vendor Advisory
http://secunia.com/advisories/31079
Third Party Advisory
http://www.openwall.com/lists/oss-security/2008/07/10/3
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/30168
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=454849
Issue Tracking
Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00016.html
Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00527.html
Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00551.html
Third Party Advisory
http://drupal.org/node/280571
Patch
Vendor Advisory
http://secunia.com/advisories/31079
Third Party Advisory
http://www.openwall.com/lists/oss-security/2008/07/10/3
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/30168
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=454849
Issue Tracking
Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00016.html
Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00527.html
Third Party Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00551.html
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*

Версия от 6.0 (включая) до 6.3 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:9:*:*:*:*:*:*:*

EPSS

Процентиль: 61%

0.00422

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

CVE-2008-3221

ubuntu

почти 17 лет назад

Cross-site request forgery (CSRF) vulnerability in Drupal 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of OpenID identities.

CVE-2008-3221

debian

почти 17 лет назад

Cross-site request forgery (CSRF) vulnerability in Drupal 6.x before 6 ...

GHSA-966g-5893-w2jh

github

около 3 лет назад

Cross-site request forgery (CSRF) vulnerability in Drupal 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of OpenID identities.

EPSS

Процентиль: 61%

0.00422

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-352