CVE-2008-4792

Опубликовано: 29 окт. 2008

Источник: nvd

CVSS2: 6

EPSS Низкий

Описание

The core BlogAPI module in Drupal 5.x before 5.11 and 6.x before 6.5 does not properly validate unspecified content fields of an internal Drupal form, which allows remote authenticated users to bypass intended access restrictions via modified field values.

Ссылки

http://drupal.org/node/318706
Patch
Vendor Advisory
http://secunia.com/advisories/32201
Third Party Advisory
http://www.openwall.com/lists/oss-security/2008/10/21/7
Mailing List
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/45761
Third Party Advisory
VDB Entry
http://drupal.org/node/318706
Patch
Vendor Advisory
http://secunia.com/advisories/32201
Third Party Advisory
http://www.openwall.com/lists/oss-security/2008/10/21/7
Mailing List
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/45761
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*

Версия от 5.0 (включая) до 5.11 (исключая)

cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*

Версия от 6.0 (включая) до 6.5 (исключая)

EPSS

Процентиль: 62%

0.00441

Низкий

6 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2008-4792

ubuntu

больше 16 лет назад

CVE-2008-4792

debian

больше 16 лет назад

The core BlogAPI module in Drupal 5.x before 5.11 and 6.x before 6.5 d ...

GHSA-8q2j-8pc6-8c5r

github

около 3 лет назад

EPSS

Процентиль: 62%

0.00441

Низкий

6 Medium

CVSS2

Дефекты

CWE-264