Description
Cross-site request forgery (CSRF) vulnerability in the Internationalization (i18n) Drupal module 5.x before 5.x-2.3 and 5.x-1.1, and 6.x before 6.x-1.0 beta 1, allows remote attackers to change node translation relationships via unspecified vectors.
References (5)
Core 5
Core References
Permissions Required vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1352/references
VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/41982
Patch, Third Party Advisory x_refsource_confirm
http://drupal.org/node/250344
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/28916
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29961
Scores
EPSS
0.0071
EPSS Percentile
49.1%
Details
CWE
CWE-352
Status
published
Products (23)
internationalization_project/internationalization
5.x-1.0
internationalization_project/internationalization
5.x-1.x dev
internationalization_project/internationalization
5.x-2.0
internationalization_project/internationalization
5.x-2.1
internationalization_project/internationalization
5.x-2.2
internationalization_project/internationalization
6.x-1.x dev
localizer_project/localizer
5.x-1.0
localizer_project/localizer
5.x-1.1
localizer_project/localizer
5.x-1.2
localizer_project/localizer
5.x-1.3
... and 13 more
Published
Apr 27, 2008
Tracked Since
Feb 18, 2026