CVE-2008-3745

EPSS 0.96%
Veröffentlicht 27.08.2008 15:21:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

The Upload module in Drupal 6.x before 6.4 allows remote authenticated users to edit nodes, delete files, and download unauthorized attachments via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Drupal ≫ Drupal Version6.0

Drupal ≫ Drupal Version6.1

Drupal ≫ Drupal Version6.2

Drupal ≫ Drupal Version6.3

Drupal ≫ Upload Module

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.96%	0.758

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.5	8	4.9	AV:N/AC:L/Au:S/C:N/I:P/A:P

http://drupal.org/node/295053

Patch

http://secunia.com/advisories/31825

http://www.securityfocus.com/bid/30689

http://www.vupen.com/english/advisories/2008/2392

https://bugzilla.redhat.com/show_bug.cgi?id=459108

https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00259.html

https://www.redhat.com/archives/fedora-package-announce/2008-September/msg00508.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/44458

https://nvd.nist.gov/vuln/detail/CVE-2008-3745

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-3745

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-3745

EUVD