Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c8j8-rr3j-m922

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The Feeds module 7.x-2.x before 7.x-2.0-alpha6 for Drupal, when a field is mapped to the node's author, does not properly check permissions, which allows remote attackers to create arbitrary nodes via a crafted source feed.

The Feeds module 7.x-2.x before 7.x-2.0-alpha6 for Drupal, when a field is mapped to the node's author, does not properly check permissions, which allows remote attackers to create arbitrary nodes via a crafted source feed.

EPSS

Процентиль: 43%
0.00208
Низкий

Связанные уязвимости

nvd
больше 12 лет назад

The Feeds module 7.x-2.x before 7.x-2.0-alpha6 for Drupal, when a field is mapped to the node's author, does not properly check permissions, which allows remote attackers to create arbitrary nodes via a crafted source feed.

EPSS

Процентиль: 43%
0.00208
Низкий