VULNERABILITY INTELLIGENCE
CVE-2008-3743
CVSS score5.8 NONE
EPSS probability0.88%
CISA KEVNot currently listed
Published2008-08-27
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:P
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in forms in Drupal 6.x before 6.4 allow remote attackers to perform unspecified actions via unknown vectors, related to improper token validation for (1) cached forms and (2) forms with AHAH elements.
Weakness classification
- nvd@nist.gov: CWE-352