CVE:CVE-2008-1977
CNNVD:CNNVD-200804-391
5.x-2.3 和 5.x-1.1以前的Internationalization (i18n) Drupal 模块 5.x ,和6.x-1.0 beta 1以前的6.x,中存在跨站请求伪造漏洞。远程攻击者通过未明向量来改变节点转换关系。
solution:Upgrade localizer_project localizer to a higher version than 5.x-1.0,5.x-1.1,5.x-1.2,5.x-1.3,5.x-1.4,5.x-1.5,5.x-1.6,5.x-1.7,5.x-1.8,5.x-1.9,5.x-1.10,5.x-1.x:dev,5.x-2.x:dev,5.x-3.0,5.x-3.1,5.x-3.2,5.x-3.3,and avoid the version 5.x-1.0,5.x-1.1,5.x-1.2,5.x-1.3,5.x-1.4,5.x-1.5,5.x-1.6,5.x-1.7,5.x-1.8,5.x-1.9,5.x-1.10,5.x-1.x:dev,5.x-2.x:dev,5.x-3.0,5.x-3.1,5.x-3.2,5.x-3.3; Upgrade internationalization_project internationalization to a higher version than 5.x-1.0,5.x-1.x:dev,5.x-2.0,5.x-2.1,5.x-2.2,6.x-1.x:dev,and avoid the version 5.x-1.0,5.x-1.x:dev,5.x-2.0,5.x-2.1,5.x-2.2,6.x-1.x:dev