CVE-2008-6169: Drupal Localization Client

Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in the Localization client 5.x before 5.x-1.1 and 6.x before 6.x-1.6 and the Localization server 5.x before 5.x-1.0-alpha5 and 6.x before 6.x-alpha2, modules for Drupal, allows remote attackers to perform unauthorized actions as administrators via unspecified vectors related to the "local translation submission interface."

Affected products

• Drupal Localization Client: up to and including 5.x-1.0; up to and including 6.x-1.5; version 5.x-1.xdev only; version 6.x-1.0 only; version 6.x-1.1 only; version 6.x-1.2 only; …
• Drupal Localization Server: up to and including 5.x-1.0alpha4; up to and including 6.x-1.0alpha1; version 5.x-1.0alpha1 only; version 5.x-1.0alpha2 only; version 5.x-1.0alpha3 only; version 5.x-1.xdev only; …

Published 2009-02-19. Last modified 2026-06-16.