CVE-2009-3568

no score yetEPSS 1.4%

Comment RSS 5.x before 5.x-2.2 and 6.x before 6.x-2.2, a module for Drupal, does not properly enforce permissions when a link is added to the RSS feed, which allows remote attackers to obtain the node title and possibly other sensitive content by reading the feed.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2009-10-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

dave_reid:commentrss
gabor_hojtsy:commentrss

References

http://drupal.org/node/579280
http://drupal.org/node/579290
http://drupal.org/node/579292
http://secunia.com/advisories/36787
http://www.osvdb.org/58177

Check your stack JSON