Lucene search
+L
DrupalNodeaccess Userreference

1 matches found

CVE
CVE
added 2009/05/01 5:0 p.m.38 views

CVE-2009-1507

The vulnerability CVE-2009-1507 affects the Drupal Node Access User Reference module (5.x prior to 5.x-2.0-beta4 and 6.x prior to 6.x-2.0-beta6). The module interprets an empty CCK user reference as the anonymous user, potentially bypassing access controls to read or modify a node. Remediation: u...

7.5CVSS6.9AI score0.01355EPSS
Save