CVE-2010-3093

The comment module in Drupal 5.x before 5.23 and 6.x before 6.18 allows remote authenticated users with certain privileges to bypass intended access…

published September 21, 2010

CVSS
—
EPSS
1%
Percentile
72.2
In the wild
Unconfirmed
What it is

The comment module in Drupal 5.x before 5.23 and 6.x before 6.18 allows remote authenticated users with certain privileges to bypass intended access restrictions and reinstate removed comments via a crafted URL, related to an "unpublishing bypass" issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01398 · 72.2th percentile
Published
2010-09-21T19:00Z
EPSS history
Timeline
  • 21 SEP 19:00Z
    The comment module in Drupal 5.x before 5.23 and 6.x before 6.18 allows remote authenticated users with certain privileges to bypass intended access…
    cvelistv5