Cross-site request forgery (CSRF) vulnerability in Drupal 6.x before 6.3 allows remote attackers to perform administrative actions via vectors involving deletion of OpenID identities.
| Software | From | Fixed in |
|---|---|---|
drupal / drupal
|
6.0 | 6.3 |
| fedoraproject / fedora | 9 | 9.x |
| fedoraproject / fedora | 8 | 8.x |