CVE-2008-6532

Multiple cross-site request forgery (CSRF) vulnerabilities in the update feature in Drupal 5.x before 5.13 and 6.x before 6.7 allow remote attackers to perform…

published March 26, 2009

CVSS
—
EPSS
1%
Percentile
54.4
In the wild
Unconfirmed
What it is

Multiple cross-site request forgery (CSRF) vulnerabilities in the update feature in Drupal 5.x before 5.13 and 6.x before 6.7 allow remote attackers to perform unauthorized actions as the superuser via unspecified vectors, as demonstrated by causing the superuser to "execute old updates" that modify the database.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00755 · 54.4th percentile
Published
2009-03-26T20:28Z
EPSS history
Timeline
  • 26 MAR 20:28Z
    Multiple cross-site request forgery (CSRF) vulnerabilities in the update feature in Drupal 5.x before 5.13 and 6.x before 6.7 allow remote attackers to perform…
    cvelistv5