CVE-2009-2075

Опубликовано: 16 июн. 2009

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Nodequeue 5.x before 5.x-2.7 and 6.x before 6.x-2.2, a module for Drupal, does not properly restrict access when displaying node titles, which has unknown impact and attack vectors.

Ссылки

http://drupal.org/node/488092
Patch
Vendor Advisory
http://drupal.org/node/488102
Patch
Vendor Advisory
http://drupal.org/node/488104
Patch
Vendor Advisory
http://secunia.com/advisories/35424
Vendor Advisory
http://www.securityfocus.com/bid/35305
Patch
http://drupal.org/node/488092
Patch
Vendor Advisory
http://drupal.org/node/488102
Patch
Vendor Advisory
http://drupal.org/node/488104
Patch
Vendor Advisory
http://secunia.com/advisories/35424
Vendor Advisory
http://www.securityfocus.com/bid/35305
Patch

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*

Одно из

cpe:2.3:a:angrydonuts:nodequeue:5.x-2.0:*:*:*:*:*:*:*

cpe:2.3:a:angrydonuts:nodequeue:5.x-2.0:beta:*:*:*:*:*:*

cpe:2.3:a:angrydonuts:nodequeue:5.x-2.0:rc:*:*:*:*:*:*

cpe:2.3:a:angrydonuts:nodequeue:5.x-2.0:rc2:*:*:*:*:*:*

cpe:2.3:a:angrydonuts:nodequeue:5.x-2.0:rc3:*:*:*:*:*:*

cpe:2.3:a:angrydonuts:nodequeue:5.x-2.1:*:*:*:*:*:*:*

cpe:2.3:a:angrydonuts:nodequeue:5.x-2.2:*:*:*:*:*:*:*

cpe:2.3:a:angrydonuts:nodequeue:5.x-2.4:*:*:*:*:*:*:*

cpe:2.3:a:angrydonuts:nodequeue:5.x-2.5:*:*:*:*:*:*:*

cpe:2.3:a:angrydonuts:nodequeue:5.x-2.6:*:*:*:*:*:*:*

cpe:2.3:a:angrydonuts:nodequeue:5.x-2.x:dev:*:*:*:*:*:*

cpe:2.3:a:angrydonuts:nodequeue:6.x-2.0:*:*:*:*:*:*:*

cpe:2.3:a:angrydonuts:nodequeue:6.x-2.1:*:*:*:*:*:*:*

cpe:2.3:a:angrydonuts:nodequeue:6.x-2.1:rc1:*:*:*:*:*:*

cpe:2.3:a:angrydonuts:nodequeue:6.x-2.1:rc2:*:*:*:*:*:*

cpe:2.3:a:angrydonuts:nodequeue:6.x-2.1:rc3:*:*:*:*:*:*

cpe:2.3:a:angrydonuts:nodequeue:6.x-2.x:dev:*:*:*:*:*:*

EPSS

Процентиль: 65%

0.00503

Низкий

7.5 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-6pj5-mm38-9526

github

около 3 лет назад