Lucene search

[email protected]CVE-2008-4793

HistoryOct 29, 2008 - 3:31 p.m.

CVE-2008-4793

2008-10-2915:31:35

CWE-264

[email protected]

web.nvd.nist.gov

drupal

cve-2008-4793

nvd

security

vulnerability

api

bypass

remote attackers

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.4%

JSON

The node module API in Drupal 5.x before 5.11 allows remote attackers to bypass node validation and have unspecified other impact via unknown vectors related to contributed modules.

Affected configurations

NVD

Node

drupaldrupalRange≤5.10

drupaldrupalMatch5.0

drupaldrupalMatch5.0beta1

drupaldrupalMatch5.0beta2

drupaldrupalMatch5.0rc1

drupaldrupalMatch5.0rc2

drupaldrupalMatch5.1

drupaldrupalMatch5.2

drupaldrupalMatch5.3

drupaldrupalMatch5.4

drupaldrupalMatch5.5

drupaldrupalMatch5.6

drupaldrupalMatch5.7

drupaldrupalMatch5.8

drupaldrupalMatch5.9

CPENameOperatorVersion
drupal:drupaldrupalle5.10
drupal:drupaldrupaleq5.0
drupal:drupaldrupaleq5.1
drupal:drupaldrupaleq5.2
drupal:drupaldrupaleq5.3
drupal:drupaldrupaleq5.4
drupal:drupaldrupaleq5.5
drupal:drupaldrupaleq5.6
drupal:drupaldrupaleq5.7
drupal:drupaldrupaleq5.8

CPE	Name	Operator	Version
drupal:drupal	drupal	le	5.10
drupal:drupal	drupal	eq	5.0
drupal:drupal	drupal	eq	5.1
drupal:drupal	drupal	eq	5.2
drupal:drupal	drupal	eq	5.3
drupal:drupal	drupal	eq	5.4
drupal:drupal	drupal	eq	5.5
drupal:drupal	drupal	eq	5.6
drupal:drupal	drupal	eq	5.7
drupal:drupal	drupal	eq	5.8