CVE-2007-5594

Publication date 19 October 2007

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

Drupal 5.x before 5.3 does not apply its Drupal Forms API protection against the user deletion form, which allows remote attackers to delete users via a cross-site request forgery (CSRF) attack.

Status

Package Ubuntu Release Status
drupal5 7.10 gutsy
Fixed 5.2-2ubuntu2.1
7.04 feisty Not in release
6.10 edgy Not in release
6.06 LTS dapper Not in release