CVE-2008-3745

EPSS 0.96%
Published 27.08.2008 15:21:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

The Upload module in Drupal 6.x before 6.4 allows remote authenticated users to edit nodes, delete files, and download unauthorized attachments via unspecified vectors.

Affected products Warnungen 0 Metrics 2 CWE 0 References 11

Data is provided by the National Vulnerability Database (NVD)

Drupal ≫ Drupal Version6.0

Drupal ≫ Drupal Version6.1

Drupal ≫ Drupal Version6.2

Drupal ≫ Drupal Version6.3

Drupal ≫ Upload Module

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.96%	0.758

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.5	8	4.9	AV:N/AC:L/Au:S/C:N/I:P/A:P

http://drupal.org/node/295053

Patch

http://secunia.com/advisories/31825

http://www.securityfocus.com/bid/30689

http://www.vupen.com/english/advisories/2008/2392

https://bugzilla.redhat.com/show_bug.cgi?id=459108

https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html

https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/44458

https://nvd.nist.gov/vuln/detail/CVE-2008-3745

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-3745

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-3745

EUVD