← Database

CVE-2009-4044

HIGH CVSS: 7.5 Published: 2009-11-20 Modified: 2026-06-16

Description

The Web Services module 6.x for Drupal does not perform the expected access control, which allows remote attackers to make unspecified use of an API via unknown vectors.

Affected Platforms

Bruno Massa Web ServicesDrupal Drupal

Weakness Type

CWE-264

References