7.5

CVE-2008-4793

The node module API in Drupal 5.x before 5.11 allows remote attackers to bypass node validation and have unspecified other impact via unknown vectors related to contributed modules.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Drupal ≫ Drupal Version <= 5.10
Drupal ≫ Drupal Version5.0
Drupal ≫ Drupal Version5.0 Updatebeta1
Drupal ≫ Drupal Version5.0 Updatebeta2
Drupal ≫ Drupal Version5.0 Updaterc1
Drupal ≫ Drupal Version5.0 Updaterc2
Drupal ≫ Drupal Version5.1
Drupal ≫ Drupal Version5.2
Drupal ≫ Drupal Version5.3
Drupal ≫ Drupal Version5.4
Drupal ≫ Drupal Version5.5
Drupal ≫ Drupal Version5.6
Drupal ≫ Drupal Version5.7
Drupal ≫ Drupal Version5.8
Drupal ≫ Drupal Version5.9
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.21% 0.803
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://drupal.org/node/318706
Patch
Vendor Advisory
http://www.openwall.com/lists/oss-security/2008/10/21/7
http://secunia.com/advisories/32200
https://exchange.xforce.ibmcloud.com/vulnerabilities/45763