Security Advisory

CVE-2010-3093

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-09-21 19:00:00
Last updated 2024-09-16 20:53:14
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

The comment module in Drupal 5.x before 5.23 and 6.x before 6.18 allows remote authenticated users with certain privileges to bypass intended access restrictions and reinstate removed comments via a crafted URL, related to an "unpublishing bypass" issue.