Security Advisory

CVE-2008-4790

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-10-29 15:00:00

Last updated 2024-08-07 10:31:27

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The core upload module in Drupal 5.x before 5.11 allows remote authenticated users to bypass intended access restrictions and read "files attached to content" via unknown vectors.

← Browse all CVEs View on cve.org ↗