GitHub Advisoryadvisory · Packagist
GHSA-ph2j-5hxq-gxrr Drupal Node Validation Bypass in the node module API
HIGH
Official page ↗
- Aliases
- CVE-2008-4793
- Ecosystem
- Packagist
- Packages
- drupal/drupal
- Severity
- High
- Weaknesses
- CWE-284
- Reviewed
- 2024-02-09
Affected packages
• Packagist drupal/drupal: >= 5.0, < 5.11 → fixed in 5.11
Description
The node module API in Drupal 5.x before 5.11 allows remote attackers to bypass node validation and have unspecified other impact via unknown vectors related to contributed modules.
Related
Alias · CVE (1)
- CVE-2008-4793 The node module API in Drupal 5.x before 5.11 allows remote attackers to bypass node validation and have unspecified other impact via… vulnerability
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2008-4793 advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45763 web
- https://github.com/drupal/drupal package
- https://web.archive.org/web/20090302033759/http://secunia.com/advisories/32200 web
- http://drupal.org/node/318706 web
- http://www.openwall.com/lists/oss-security/2008/10/21/7 web