6

CVE-2008-4790

The core upload module in Drupal 5.x before 5.11 allows remote authenticated users to bypass intended access restrictions and read "files attached to content" via unknown vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Drupal ≫ Drupal Version <= 5.10
Drupal ≫ Drupal Version5.0
Drupal ≫ Drupal Version5.0 Updatebeta1
Drupal ≫ Drupal Version5.0 Updatebeta2
Drupal ≫ Drupal Version5.0 Updaterc1
Drupal ≫ Drupal Version5.0 Updaterc2
Drupal ≫ Drupal Version5.1
Drupal ≫ Drupal Version5.2
Drupal ≫ Drupal Version5.3
Drupal ≫ Drupal Version5.4
Drupal ≫ Drupal Version5.5
Drupal ≫ Drupal Version5.6
Drupal ≫ Drupal Version5.7
Drupal ≫ Drupal Version5.8
Drupal ≫ Drupal Version5.9
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.478
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6 6.8 6.4
AV:N/AC:M/Au:S/C:P/I:P/A:P
http://drupal.org/node/318706
Patch
Vendor Advisory