VULNERABILITY INTELLIGENCE
CVE-2008-3744
CVSS score5.8 MEDIUM
EPSS probability0.88%
CISA KEVNot currently listed
Published2008-08-27
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:P
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.10 and 6.x before 6.4 allow remote attackers to hijack the authentication of administrators for requests that (1) add or (2) delete user access rules.
Weakness classification
- CWE-352: Cross-Site Request Forgery (CSRF)