Lucene search
HistoryJan 15, 2008 - 8:00 p.m.
CVE-2008-0275
cve-2008-0275
drupal
atom
permissions
remote attackers
syndicated content
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.9%
The Atom 4.7 before 4.7.x-1.0 and 5.x before 5.x-1.0 module for Drupal does not properly manage permissions for node (1) titles, (2) teasers, and (3) bodies, which might allow remote attackers to gain access to syndicated content.
Affected configurations
Node
drupalatom_moduleRange≤4.7
ORdrupalatom_moduleRange≤5.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| drupal:atom_module | drupal atom module | le | 4.7 |
| drupal:atom_module | drupal atom module | le | 5.0 |
Related
cvelist
cvelist
CVE-2008-0275
2008-01-15 19:00:00
nvd
nvd
CVE-2008-0275
2008-01-15 20:00:00
prion
prion
Code injection
2008-01-15 20:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.9%
Related for CVE-2008-0275