FKIE_CVE-2008-6169

Vulnerability from fkie_nvd - Published: 2009-02-19 15:30 - Updated: 2026-06-16 23:01
Severity
Summary
Cross-site request forgery (CSRF) vulnerability in the Localization client 5.x before 5.x-1.1 and 6.x before 6.x-1.6 and the Localization server 5.x before 5.x-1.0-alpha5 and 6.x before 6.x-alpha2, modules for Drupal, allows remote attackers to perform unauthorized actions as administrators via unspecified vectors related to the "local translation submission interface."
References
cve@mitre.orghttp://drupal.org/node/324862Patch, Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/32388Vendor Advisory
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/46044
af854a3a-2127-422b-91ae-364da2661108http://drupal.org/node/324862Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/32388Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/46044
Impacted products
Vendor Product Version
drupal localization_client *
drupal localization_client *
drupal localization_client 5.x-1.xdev
drupal localization_client 6.x-1.0
drupal localization_client 6.x-1.1
drupal localization_client 6.x-1.2
drupal localization_client 6.x-1.3
drupal localization_client 6.x-1.4
drupal localization_client 6.x-1.xdev
drupal localization_server *
drupal localization_server *
drupal localization_server 5.x-1.0alpha1
drupal localization_server 5.x-1.0alpha2
drupal localization_server 5.x-1.0alpha3
drupal localization_server 5.x-1.xdev
drupal localization_server 6.x-1.xdev
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:drupal:localization_client:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B628D63F-035D-4618-AA2D-40E88A642917",
              "versionEndIncluding": "5.x-1.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:localization_client:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9554C9A-9F79-42FF-808E-2A6265839B68",
              "versionEndIncluding": "6.x-1.5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:localization_client:5.x-1.xdev:*:*:*:*:*:*:*",
              "matchCriteriaId": "1426782B-F79F-409E-A855-413C9C780FC1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:localization_client:6.x-1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "E6A4EE4E-EA90-4E6C-92F9-3A54405593A3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:localization_client:6.x-1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "5F6DDC58-2B86-426A-8581-BED2D853A83C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:localization_client:6.x-1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "8A17AEEF-A5F9-48A6-B95F-FA3396BAD2BB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:localization_client:6.x-1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "B4060FDC-1BAE-4A9F-9123-BF37365F1258",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:localization_client:6.x-1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B36A0D0-1A87-487A-80CD-87E21F57C056",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:localization_client:6.x-1.xdev:*:*:*:*:*:*:*",
              "matchCriteriaId": "057E6EE9-EEAC-4DB2-BC61-17D66590AC9C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:localization_server:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3AFF959F-05F9-46B2-BCF3-10B784594DD2",
              "versionEndIncluding": "5.x-1.0alpha4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:localization_server:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "51872E93-6578-4EFA-8900-20096033DFF2",
              "versionEndIncluding": "6.x-1.0alpha1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:localization_server:5.x-1.0alpha1:*:*:*:*:*:*:*",
              "matchCriteriaId": "85B9EAC0-0FC5-4586-B0B2-C8EA5D4DBA2D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:localization_server:5.x-1.0alpha2:*:*:*:*:*:*:*",
              "matchCriteriaId": "47A480FB-AFEF-4948-9770-92D584F90642",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:localization_server:5.x-1.0alpha3:*:*:*:*:*:*:*",
              "matchCriteriaId": "001F51B7-E9DF-48F5-8E4D-18F527CF2C44",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:localization_server:5.x-1.xdev:*:*:*:*:*:*:*",
              "matchCriteriaId": "BE961C81-4E51-444C-8B82-C3AE444D19B5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:drupal:localization_server:6.x-1.xdev:*:*:*:*:*:*:*",
              "matchCriteriaId": "77E374F6-FAF7-460D-9010-BC87F7896922",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site request forgery (CSRF) vulnerability in the Localization client 5.x before 5.x-1.1 and 6.x before 6.x-1.6 and the Localization server 5.x before 5.x-1.0-alpha5 and 6.x before 6.x-alpha2, modules for Drupal, allows remote attackers to perform unauthorized actions as administrators via unspecified vectors related to the \"local translation submission interface.\""
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de falsificaci\u00f3n de petici\u00f3n en sitios cruzados (CSRF) en los modulos para Drupal Localization Client 5.x antes de 5.x-1.1 y 6.x antes de 6.x-1.6 y Localization Server 5.x antes de 5.x-1.0-alpha5 y 6. x antes de 6.x-alfa2, permite a atacantes remotos realizar acciones no autorizadas como administradores a trav\u00e9s de vectores no especificados relacionados con el \"interfaz de env\u00edo local de traducciones\"."
    }
  ],
  "id": "CVE-2008-6169",
  "lastModified": "2026-06-16T23:01:44.757",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.8,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2009-02-19T15:30:00.343",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://drupal.org/node/324862"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/32388"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46044"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://drupal.org/node/324862"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/32388"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46044"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-352"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.