CVE-2008-3421

no score yetEPSS 0.5%

Multiple cross-site request forgery (CSRF) vulnerabilities in Blackboard Academic Suite 8.0.260.7 allow remote attackers to hijack the authentication of student users for requests that change configuration and enrollments via unspecified input to (1) update_module.jsp, (2) enroll_course.pl, and (3) unenroll.jsp.

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2008-07-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

blackboard:blackboard_academic_suite

References

http://ceaseless.ws/bb-csrf/
http://secunia.com/advisories/31177
http://www.securitytracker.com/id?1020559
https://exchange.xforce.ibmcloud.com/vulnerabilities/43986
http://ceaseless.ws/bb-csrf/

Check your stack JSON