CVE-2007-0506

no score yetEPSS 1.2%

The project_issue_access function in the Project issue tracking 4.7.0 through 5.x before 20070123 module for Drupal allows remote authenticated users to bypass other access control modules and obtain attached files by guessing the filename, and obtain issue information via direct requests.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
Published: 2007-01-26
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

drupal:project
drupal:project_issue_tracking_module

References

http://drupal.org/node/112146
http://osvdb.org/32135
http://secunia.com/advisories/23887
http://www.securityfocus.com/bid/22224
http://www.vupen.com/english/advisories/2007/0312

Check your stack JSON