CVEvulnerability
CVE-2008-4790
6.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-10-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.0 MEDIUM — AV:N/AC:M/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The core upload module in Drupal 5.x before 5.11 allows remote authenticated users to bypass intended access restrictions and read "files attached to content" via unknown vectors.
Affected configurations
• drupal drupal (<= 5.10)
• drupal drupal 5.0
• drupal drupal 5.1
• drupal drupal 5.2
• drupal drupal 5.3
• drupal drupal 5.4
• drupal drupal 5.5
• drupal drupal 5.6
• drupal drupal 5.7
• drupal drupal 5.8
• drupal drupal 5.9
Related
Weakness · not in database (1)
References
- http://drupal.org/node/318706 Patch, Vendor Advisory
- http://secunia.com/advisories/32198 secunia.com
- http://secunia.com/advisories/32200 secunia.com
- http://www.openwall.com/lists/oss-security/2008/10/21/7 www.openwall.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45758 exchange.xforce.ibmcloud.com
- http://drupal.org/node/318706 Patch, Vendor Advisory
- http://secunia.com/advisories/32198 secunia.com
- http://secunia.com/advisories/32200 secunia.com
- http://www.openwall.com/lists/oss-security/2008/10/21/7 www.openwall.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45758 exchange.xforce.ibmcloud.com