CVE-2008-4153

The Talk module 5.x before 5.x-1.3 and 6.x before 6.x-1.5, a module for Drupal, does not perform access checks for a node before displaying comments, which allows remote attackers to obtain sensitive information...

CVE-2008-4153

The Talk module for Drupal (5.x before 5.x-1.3 and 6.x before 6.x-1.5) fails to perform access checks on a node before displaying its comments, enabling remote users to view sensitive information. Root cause: missing access checks in the module. Impact: information disclosure. Remediation: upgrad...