Description
The Aggregation module 5.x before 5.x-4.4 for Drupal, when node access modules are used, does not properly implement access control, which allows remote attackers to bypass intended restrictions.
References
- http://drupal.org/node/269479
- aggregation-access-security-bypass(43017) vdb-entry
- 29677 vdb-entry
- 30618 third-party-advisory