CVE-2008-2771 The Node Hierarchy module 5.x before 5.x-1.1 and 6.x before 6.x-1.0 for Drupal does not properly implement access checks, which allows remote attackers with "access content" permissions to bypass rest...
MediumCVSS 5.0
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Node Hierarchy module 5.x before 5.x-1.1 and 6.x before 6.x-1.0 for Drupal does not properly implement access checks, which allows remote attackers with "access content" permissions to bypass restrictions and modify the node hierarchy via unspecified attack vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| drupal/drupal | = 5.0 | No fix listed |
| drupal/drupal | = 6.0 | No fix listed |
| drupal node hierarchy module | = 5 | No fix listed |
| drupal node hierarchy module | = 6 | No fix listed |
References
- drupal.org patch
- 30622 patch third-party-advisory vendor-advisory
- 29675 patch vdb-entry
- node-hierarchy-access-security-bypass(43006) vdb-entry