← Database

CVE-2008-4790

MEDIUM CVSS: 6.0 Published: 2008-10-29 Modified: 2026-06-16

Description

The core upload module in Drupal 5.x before 5.11 allows remote authenticated users to bypass intended access restrictions and read "files attached to content" via unknown vectors.

Affected Platforms

Drupal Drupal

Weakness Type

CWE-264

References