CVE-2008-1981: Cross-site request forgery (CSRF) vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0 beta...

Security readout for executives and security teams

This is an old CSRF flaw in the Drupal E-Publish module. If a vulnerable site has logged-in users, an attacker may be able to cause actions to happen under a victim user’s authority. The public details do not identify the exact actions, severity, or exploit status. Exposure appears limited to Drupal sites running the E-Publish module versions named in the CVE description. Risk is most relevant where authenticated users have meaningful publishing or administrative permissions. The sources do not identify affected routes, forms, or default exposure. Treat this as a targeted legacy exposure check, not a broad emergency. Prioritize if the organization still operates old Drupal sites or publishing workflows using E-Publish, especially where privileged users regularly authenticate. Mitigation focus: Identify whether Drupal E-Publish is installed and determine its exact module version.; Upgrade E-Publish beyond the vulnerable versions named by Drupal guidance.; Review Drupal advisory node 250408 for vendor-specific remediation details..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.