CVE-2009-3568

Comment RSS 5.x before 5.x-2.2 and 6.x before 6.x-2.2, a module for Drupal, does not properly enforce permissions when a link is added to the RSS feed, which…

published October 6, 2009

CVSS
—
EPSS
1%
Percentile
73.0
In the wild
Unconfirmed
What it is

Comment RSS 5.x before 5.x-2.2 and 6.x before 6.x-2.2, a module for Drupal, does not properly enforce permissions when a link is added to the RSS feed, which allows remote attackers to obtain the node title and possibly other sensitive content by reading the feed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01444 · 73.0th percentile
Published
2009-10-06T20:19Z
EPSS history
Timeline
  • 06 OCT 20:19Z
    Comment RSS 5.x before 5.x-2.2 and 6.x before 6.x-2.2, a module for Drupal, does not properly enforce permissions when a link is added to the RSS feed, which…
    cvelistv5