7.8

CVE-2007-3690

EPSS 0.71%
Veröffentlicht 11.07.2007 17:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The Forward module before 4.7-1.1 and 5.x before 5.x-1.0 for Drupal allows remote attackers to read restricted posts in (1) Organic Groups, (2) Taxonomy Access Control, (3) Taxonomy Access Lite, and other unspecified node access modules, via modified URL arguments.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Drupal ≫ Forward Module Version <= 4.7

Drupal ≫ Forward Module Version <= 5.x-1.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.71%	0.715

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	10	6.9	AV:N/AC:L/Au:N/C:C/I:N/A:N

http://www.securityfocus.com/bid/24862

http://drupal.org/node/152806

Patch

http://drupal.org/node/158022

Patch

http://drupal.org/node/158025

Patch

http://osvdb.org/37896

http://secunia.com/advisories/25999

http://www.vupen.com/english/advisories/2007/2469

https://exchange.xforce.ibmcloud.com/vulnerabilities/35318

https://nvd.nist.gov/vuln/detail/CVE-2007-3690

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-3690

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-3690

EUVD