5

CVE-2010-2353

The Node Reference module in Content Construction Kit (CCK) module 6.x before 6.x-2.7 for Drupal does not perform access checks for the source field in the backend URL for the autocomplete widget, which allows remote attackers to discover titles and IDs of controlled nodes.

Data is provided by the National Vulnerability Database (NVD)
Yves Chedemois ≫ Cck Version6.x-1.0-alpha
   Drupal ≫ Drupal
Yves Chedemois ≫ Cck Version6.x-1.x-dev
   Drupal ≫ Drupal
Yves Chedemois ≫ Cck Version6.x-2.0
   Drupal ≫ Drupal
Yves Chedemois ≫ Cck Version6.x-2.0 Updatebeta
   Drupal ≫ Drupal
Yves Chedemois ≫ Cck Version6.x-2.0 Updaterc1
   Drupal ≫ Drupal
Yves Chedemois ≫ Cck Version6.x-2.0 Updaterc10
   Drupal ≫ Drupal
Yves Chedemois ≫ Cck Version6.x-2.0 Updaterc2
   Drupal ≫ Drupal
Yves Chedemois ≫ Cck Version6.x-2.0 Updaterc3
   Drupal ≫ Drupal
Yves Chedemois ≫ Cck Version6.x-2.0 Updaterc4
   Drupal ≫ Drupal
Yves Chedemois ≫ Cck Version6.x-2.0 Updaterc5
   Drupal ≫ Drupal
Yves Chedemois ≫ Cck Version6.x-2.0 Updaterc6
   Drupal ≫ Drupal
Yves Chedemois ≫ Cck Version6.x-2.0 Updaterc7
   Drupal ≫ Drupal
Yves Chedemois ≫ Cck Version6.x-2.0 Updaterc8
   Drupal ≫ Drupal
Yves Chedemois ≫ Cck Version6.x-2.0 Updaterc9
   Drupal ≫ Drupal
Yves Chedemois ≫ Cck Version6.x-2.1
   Drupal ≫ Drupal
Yves Chedemois ≫ Cck Version6.x-2.2
   Drupal ≫ Drupal
Yves Chedemois ≫ Cck Version6.x-2.3
   Drupal ≫ Drupal
Yves Chedemois ≫ Cck Version6.x-2.4
   Drupal ≫ Drupal
Yves Chedemois ≫ Cck Version6.x-2.5
   Drupal ≫ Drupal
Yves Chedemois ≫ Cck Version6.x-2.6
   Drupal ≫ Drupal
Yves Chedemois ≫ Cck Version6.x-2.x-dev
   Drupal ≫ Drupal
Yves Chedemois ≫ Cck Version6.x-3.x-dev
   Drupal ≫ Drupal
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.68% 0.709
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N