← Database

CVE-2009-4515

MEDIUM CVSS: 5.0 Published: 2009-12-31 Modified: 2026-06-16

Description

The Storm module 6.x before 6.x-1.25 for Drupal does not enforce privilege requirements for storminvoiceitem nodes, which allows remote attackers to read node titles via unspecified vectors.

Affected Platforms

Drupal DrupalSpeedtech Storm

Weakness Type

CWE-264

References