CVE-2008-6384: Drupal Comment Mail

Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in Comment Mail 5.x before 5.x-1.1, a module for Drupal, allow remote attackers to hijack the authentication of administrators.

Affected products

• Drupal Comment Mail: version 5.x-0.1 only; version 5.x-1.0 only; version 5.x-1.x only

Published 2009-03-02. Last modified 2026-06-16.