Cross-site request forgery (CSRF) vulnerability in Drupal 5.x before 5.8 and 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of "translated strings."
| Software | From | Fixed in |
|---|---|---|
drupal / drupal
|
6.0 | 6.3 |
drupal / drupal
|
5.0 | 5.8 |
| fedoraproject / fedora | 9 | 9.x |
| fedoraproject / fedora | 8 | 8.x |