CVE-2008-4792

The core BlogAPI module in Drupal 5.x before 5.11 and 6.x before 6.5 does not properly validate unspecified content fields of an internal Drupal form, which…

published October 29, 2008

CVSS
—
EPSS
1%
Percentile
69.8
In the wild
Unconfirmed
What it is

The core BlogAPI module in Drupal 5.x before 5.11 and 6.x before 6.5 does not properly validate unspecified content fields of an internal Drupal form, which allows remote authenticated users to bypass intended access restrictions via modified field values.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01282 · 69.8th percentile
Published
2008-10-29T15:00Z
EPSS history
Timeline
  • 29 OCT 15:00Z
    The core BlogAPI module in Drupal 5.x before 5.11 and 6.x before 6.5 does not properly validate unspecified content fields of an internal Drupal form, which…
    cvelistv5