← Database

CVE-2009-3568

MEDIUM CVSS: 5.0 Published: 2009-10-06 Modified: 2026-06-16

Description

Comment RSS 5.x before 5.x-2.2 and 6.x before 6.x-2.2, a module for Drupal, does not properly enforce permissions when a link is added to the RSS feed, which allows remote attackers to obtain the node title and possibly other sensitive content by reading the feed.

Affected Platforms

Drupal DrupalGabor Hojtsy CommentrssDave Reid Commentrss

Weakness Type

CWE-264

References