PT-2010-4540

CVE-2010-3093

·

Published

2010-09-21

·

Updated

2010-09-22

Description by

CVSS 2.0
3.5
Low
MetricsAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Drupal versions 5.x before 5.23 Drupal versions 6.x before 6.18
Description The issue allows remote authenticated users with certain privileges to bypass intended access restrictions and reinstate removed comments via a crafted URL, related to an "unpublishing bypass" issue.
Recommendations For Drupal versions 5.x before 5.23, update to version 5.23 or later. For Drupal versions 6.x before 6.18, update to version 6.18 or later.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2010-3093
DSA-2113-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com